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Prepare For Enterprise Growth 

Is your enterprise prepared for brighter days 
ahead? We talked with some 
industry insiders to come up 
with these tips for mal<ing sure 
your data center infrastructure is 
ready for growth. See page 22. 
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INFRASTRUCTURE 

■ With energy consumption on the rise— and expected 
to keep growing— data center managers are continually 
on the lookout for ways to increase efficiency and cut 
down on power and cooling costs page 1 

■ Uptime Software up.time monitors enterprise 
infrastructure and applications, helping you identify 
which areas may cause concern page 7 

■ Product Spotlight: Portable Cooling page 14 

■ In an ironic twist of IT fate, data centers often 
discover that their efforts to solve power and cooling 
problems through virtualization can actually create 
more problems page 16 

■ Shields Environmental offers a program combining 
warranty, Inventory management/asset recovery, 

testing/repair, exciiange, and disposition services .... page 17 

■ Achieving LEED certification— whether for a data cen- 
ter or the building in which it's housed— can pay for Itself 
In terms of cost savings and In marketing strategy, experts 
say, but getting there Is no small task page 18 

NETWORKING & VPN 

■ Even though end users might believe there's plenty 
of bandwidth to support business applications, the fact 
is network engineers are fighting a constant battle to 
allocate bandwidth page 19 

■ In terms of data center availability, there are four com- 
mon approaches. We'll take a look at each so you can 
evaluate which is best for your enterprise page 20 

STORAGE 

H Product Spotlight: 

Storage Encryption page 26 

■ Product Spotlight: 

Enterprise SSDs page 28 

m As with many other functions, organizations are start- 
ing to be Interested In how moving storage to the cloud 
might offer some savings and accessibility. Nin/anix 
hopes to capitalize on that Interest page 30 



Social 

Networking 

Nuisances 

Several Aspects Of Social Networks 
Serve As Major Pain Points For IT 



by Holly Dolezalek 

IT PROBLEMS often take place at the line 
between the personal and the profession- 
al. Employees download a file to their 
work computer that has a virus in it. 
Salespeople put both 
personal and profes- 
sional contacts on 
their BlackBerrys 
and then leave them 
in a cab. The sim- 
ple answer is to for- 
bid personal use of 
company assets, but 
the cost is the blend 
of personal and pro- 
fessional that leads 
to more productivity 
or better connections. 
Nowhere is that more 
apparent than so- 
cial networking. 

What looks like a 
pure time-waster that 
your employees use to 
avoid work can turn 
out to be an essential 
tool — for example, 
sales personnel are 
famous for mining 

Linkedin for sales leads — so handling the 
security and productivity issues that are 
sometimes raised by social networking sites 
isn't simple at all. 

"These sites are valuable for building 
relationships and getting contacts, and 



when employees are using them for those 
reasons, it's not really an option to just 
block them," says Mike Hrabik, CTO of 
Solutionary (www.solutionary.com). "On 
the other hand, there are many people 
who take advantage of these large groups 




Key Points 



Social networking sites pose both 
technical threats and behavioral threats. 

Blocking social networking isn't always the 
answer, because many employees use 
these resources for business reasons. 

Your best bet is establishing policies that 
outline acceptable use and testing to 
nnake sure that users are complying with 
those policies. 



of members and who gather information 
to attack the members of those sites." 

Malware & Social Engineering 

The technical issues with these sites are 
relatively well-known. Viruses abound on 
Facebook, for example, where hackers post 
links for unsuspecting users to click. Those 
links often lead to a fake site where the user 
is prompted to give personal information or 
simply give that user a virus that then prop- 
agates itself through his entire contact list. 
"When a computer inside your network 
gets compromised, the attacker can access 
all data on that system as well as all the 
data and systems that computer or any 
users of that computer have access to," 
says Kevin Prince, CTO of Perimeter E- 
Security (www.perimeterusa.com). "This 
Go to Page 8 



Energy 
Options 

Alternative Power Sources 
For The Data Center 

by Elizabeth Millard 



With energy consumption on the 
rise — and expected to keep growing — 
data center managers are continually 
on the lookout for ways to increase effi- 
ciency and cut down on power and cool- 
ing costs. Although alternative energy 
strategies such as solar and wind aren't 
widespread yet, the move toward green 
technology could boost adoption rates in 
the coming years. 

"Basically, anything that can offset the 
use of commercial power and its associ- 
ated costs is being looked at," notes Kris 
Domich, principal consultant at Dimension 
Data (www.dimensiondata.com). "As a ben- 
efit to moving in that direction, we're likely 
to see cleaner, greener data centers. The cost 
to get there might be too high for most data 



Key Points 



The ever-increasing demand for power is 
likely to drive more research into alternative 
energies, and subsequently, lead adoption 
for these energies in data centers. 

Compelling research is being done that 
could help boost the efficiency of other 
alternative energy forms, such as wind. 

The cost to implement alternative energy 
sources is fairly high for smaller data cen- 
ters right now, but experts expect the costs 
to come down as the demand rises. 



centers right now, but it's likely to come 
down as the interest keeps growing." 

Research Initiatives 

The alternative energy field certainly 
brims with possibilities when it comes to 
research, development, and partnerships. 
Early this year, for instance, Lawrence 
Livermore National Laboratory signed an 
agreement with Siemens Energy (www 
.siemens.com) to provide high-resolution 
atmospheric modeling capabilities, a strat- 
egy that can improve the efficiency of 
wind farm operations. 

The laboratory's modeling will allow 
for better weather forecasting, which is 
vital for boosting wind performance, 
according to Julie Lundquist, a Livermore 
scientist who heads the project. She notes 
that the methods they've developed for 
simulating turbulent properties of the 
lower atmosphere will result in a predic- 
tive advantage for wind energy farms. 
Go to Page 8 
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I Cell Phone Brain Cancer Study 
Deemed Inconclusive 

A 10-year study from the World Health Organi- 
zation found no conclusive results regarding 
whether cell phone use is linked to occurrences 
of brain cancer. The World Health Organization 
did say that the patterns of mobile phone use are 
changing, especially with young people, and that 
further investigation of the brain cancer risk from 
mobile phones will need to be performed. So 
although an increased risk of brain cancer was 
not established, the data also didn't point to any 
information the other way. The study examined 
13,000 cell phone users and was funded by a 
group of governments, national health agencies, 
and mobile industry vendors. 

I LTE Subscribers To Pass 200 W\\\'m 

Over the next five years, the number of LTE 
(Long-Term Evolution) subscribers will surpass 
200 million, according to a report from IVlara- 
vedis. LTE allows customers to utilize networks 
with higher bandwidth and better capacity than 
current 3G networks. Of the top 25 carriers 
worldwide, 80% have committed to building an 
LTE infrastructure and have already chosen ven- 
dors for initial trials, and Maravedis estimates 
that LTE use will likely begin to become more 
prevalent in North America and parts of Asia. 
Key issues with LTE, according to the executives 
surveyed for the report, were the availability of 
LTE devices, global roaming problems, and the 
problem of delivering voice over LTE. 

I Another Recall For HP Laptop Batteries 

A defect that causes potential fire hazards is forc- 
ing HP to issue a recall of 54,000 of its lithium-ion 
laptop batteries, adding to the 70,000 batteries it 
recalled in IVlay of last year. Reportedly, there 
have been 38 additional incidents of overheating 
and rupturing, with 1 1 of the incidents resulting in 
injury. In almost all of the reports, minor property 



damage occurred. Products affected 
by the recall include laptops under the 
HP, Pavilion, Compaq, and Compaq 
Presario brands sold either by HP direct- 
ly or through e-retailers between August 
2007 and July 2008. To aid consumers 
in correcting the problem, HP has set up 
a Web site showing serial numbers of the 
defective products, along with instructions for 
acquiring replacements. 

I Yahoo! Buys Indonesian Social Network 

Yahoo! has acquired Koprol, a small social 
networking company with its headquarters in 
Jakarta, Indonesia. Koprol centers its efforts 
around mobile phone browsers and provides 
location-aware sen/ices such as messaging, 
photo sharing, and restaurant reviews and rat- 
ings for its customer base in the region. Yahoo! 
did not disclose the terms of the acquisition of 
the year-old company, but it did indicate a will- 
ingness to invest in its growth and development. 

I McAfee To Acquire Trust Digital 

McAfee is moving further into mobile security 
with its latest purchase. The company has 
entered into a definitive agreement to buy Trust 
Digital, it says, although it did not reveal the 
terms of the proposed transaction. Trust Digital 
is a provider of enterprise mobility management 
and deployment software related to smart- 
phones, along with other business services and 
applications. The deal, which is expected to be 
finalized by the end of this month, will allow 
McAfee to offer a comprehensive management 
platform for its customers' mixed smartphone 
platform environments, the company says. 

I DoJ Fines EMC $87.5 Million 

EMC has paid $87.5 million to the U.S. govern- 
ment, settling allegations that it violated the False 
Claims Act and the federal Anti-kickback Act. 
The U.S. Department of Justice accused EMC of 
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"misrepresenting its com- 
mercial pricing practices" 
to fraudulently induce the 
GSA (General Services 
Administration) to 
enter into a contract 
containing prices 
higher than if EMC 
hadn't made false 
misrepresentations. The DoJ says that 
during contract negotiations, EMC indicated it 
would compare prices to ensure that the govern- 
ment received the lowest price offered to any of 
the company's commercial customers making a 
comparable purchase, knowing it couldn't con- 
duct such comparisons. The kickback charges 
allege that EMC attempted to influence the gov- 
ernment's purchasing decisions by offering 
payments to third-party consulting firms for rec- 
ommending that the government invest in EMC's 
products. For its part, EMC denies any liability in 
the matter and hopes the incident can be put to 
rest now that the fines have been paid. 

I Customer Satisfaction Holding Steady 

Customer satisfaction with cable TV, wireless 
and landline telephone, and computer software 
services is doing quite well, with Microsoft, 
Sprint Nextel, and AT&T showing particularly 
big gains during 01 2010, according to the 
American Customer Satisfaction Index, which 
measures customer satisfaction with products 
and services in various sectors. "Although the 
national index is unchanged at 75.9 on ACSI's 
100-point scale, its level remains high, and 
almost every industry has improved," the ACSI 
says. Customer satisfaction with cable TV ser- 
vice rose to its highest level in 1 years, hitting 
66, with Verizon's FiOS service scoring 73 and 
AT&T's U-verse 72. AT&T led the landline tele- 
phone service sector at 75, followed by Cox (74) 
and Verizon (73); as for wireless telephone, 
Verizon and T-Mobile tied for first with scores of 
73, and Sprint Nextel was third with 70. Sat- 
isfaction with all types of software for personal 
computers rose 1% to 76, an all-time high. 

I FCC Frees Up 25MHz 
Of Wireless Spectrum 

The Federal Communications Commission 
recently voted to amend the rules governing the 
spectrum for mobile broadband providers. The 
Wireless Communications Service rules have 
now freed up a 25MHz band of spectrum for 
mobile broadband, a move that is controversial 
due to some satellite sen/ice providers and aero- 
nautical telemetry services that are concerned 
about interference. The FCC says provisions 
within its new rules will mitigate those concerns, 
as the vote also included setting power level max- 
imums on spectrum use and granting permission 
for satellite providers to use terrestrial repeaters 
to mitigate interference. The FCC plans to contin- 
ue to find spectrum for mobile broadband, with 
the goal of 500MHz within a decade. 
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I Microsoft To Pursue Click Launderers 

Software giant Microsoft Inas launclied an 
attaol< against clicl< laundering, a term used 
to describe tine practice of artificiaiiy adding 
ciicl<s to Web site ads. Tiie company lias filed 
lawsuits against two companies it believes 
have engaged in this practice, RedOrbit and 
HelloMetro. Microsoft alleges that rather than 
using the traditional method of directing traffic 
to ads via botnets and parl<ed sites, RedOrbit 
used a new and more sophisticated practice of 
directing the traffic to its own servers, removing 
identifying information, and replacing the code 
with information that made it lool< like the hits 
came directly to the site in question. Microsoft 
claims to have installed technology to combat 
future occurrences of this type of click launder- 
ing and hopes that its lawsuits will also serve to 
thwart others from engaging in the practice. 

I Gartner Predicts Effects Of 
Server l\/larket Climb 

Despite decreased revenue and volume in the 
server market in 2009, Gartner predicts the 
market will turn around in 2010 and escalate 
problems IT personnel are already facing. Data 
center power, cooling, and space have always 
been challenges for organizations, but Gartner 
says that if the market rebounds as predicted, 
IT personnel will need to have plans in place to 
manage the problem. Gartner suggests starting 
by accurately measuring the problem and then 
integrating energy-monitoring tools. IT profes- 
sionals can also hasten consolidation and virtu- 
alization projects or delay plans to implement 
new servers until space, power, and cooling 
can be sufficiently provided. 

I IBM Global CEO Study 
Shows Uncertainty 

Less than half of the CEOs interviewed by IBM 
feel their organizations are equipped to handle 
a business environment that is growing more 
volatile and complex by the day. Through in- 
person interviews, IBM surveyed more than 
1 ,500 CEOs from 60 countries and 33 indus- 
tries around the world. About 80% of respon- 
dents expect their business environments to 
continue to increase in complexity, and about 
87% say the expected increase in government 
intervention and regulation is adding to their 
uncertainty. Creativity in regard to administer- 
ing structure, finances, people, and strategy 
was cited as the best way to navigate through 
the complex business environments. 

I Global IT Companies Unite As UCIF 

HP, Juniper, Microsoft, Logitech/LifeSize Com- 
munications, and Polycom are among the glob- 
al tech companies that have come together to 
establish the UCIF (Unified Communications 
Interoperability Forum). The nonprofit organiza- 
tion will create true open standards for unified 
communications, including UC environment 
migration, mission-critical application deploy- 
ment, and federation between vendors, which 
can be applied to selecting UC technology com- 
ponents and services. Other committed compa- 
nies include Broadcom, Brocade, ClearOne, 
Jabra, Plantronics, and Siemens, to 
name a few; additionally, Avaya, 
Skype, and Cisco have also 
received invitations to join the \ 
UCIF. The organization hopes to 
streamline the communication tech- 
nologies for end users and the corpo- 
rate facilitation of interoperability testing 

I Study: Google Pac-Man Game 
Cost Money & Man-Hours 

According to a study conducted by Rescue- 
Time, Google's free Pac-Man game cost com- 
panies 4.8 million hours of work time and about 
$120.5 million. Google posted the Pac-Man app 
as its home page logo; users were able to play 
the game each time they accessed the ubiqui- 
tous search engine. RescueTime says an aver- 
age employee spends four and a half minutes 



searching Google over the course of a day, 
comprising 22 page views. Google posted 
the game on its home page in honor of the 
video game's 30th anniversary; overall, it drew 
504 million unique views. 

I FTC Investigates Copy Machine 
Privacy Threats 

The Federal Trade Commission announced 
recently that it will begin contacting copy 
machine resellers, manufacturers, and office 
supply stores regarding potential privacy risks 
that copy machines could pose. The risks stem 
from the fact that many copy machines store 
digital copies of scanned items on their hard 
drives. A CBS report was able to find sensitive 
information on copy machine hard drives, 
including health records and law enforcement 
investigation information that individuals had 
copied. The FTC is currently working to edu- 
cate those who handle and use copy machines 
about hard drives and privacy issues. 

I Oracle To Buy Secerno 

Oracle announced that it plans to buy Secerno, 
a manufacturer of firewall products designed for 
databases. Secerno makes various hardware 
and software products under its DataWall series, 
all of which work to block unauthorized access 
to databases. Oracle will benefit from Secerno's 
technology because there is a rising demand for 
data protection products, Oracle says. Once the 
deal is complete, Oracle plans to honor Secerno 
partner agreements to ensure a smooth transi- 
tion. Financial details of the agreement were 
not disclosed for the deal, which is expected to 
close at the end of this month. 

I P2P Networks Leak Healthcare Data 

A Dartmouth College study has determined that 
healthcare data is freely available on many P2P 
(peer-to-peer) networks, such as LimeWire, 
eDonkey, and BearShare. Data discovered on 
those networks includes spreadsheets containing 
insurance details, personally identifying informa- 
tion, physician names, and diagnosis codes on 
more than 28,000 patients. A similar document 
contained information on another 7,000 patients. 
Many documents also included treatment data 
and psychiatric evaluations. Although some of 
the documents appear to be older, many are 
recent enough to have been leaked subsequent 
to the passage of the Obama administration's 
HITECH (Health Information Technology for 
Economic and Clinical Health) Act. 

I IBM Acquires AT&T Business Unit 

IBM has agreed to buy AT&T's Sterling Com- 
merce unit, a division that publishes software 
aimed at helping businesses buy and sell to one 
another. Sterling has 1 8,000 clients worldwide, 
including H.J. Heinz and Motorola, and plays a 
part in about 1 billion deals every year. The B2B 
company's annual revenues were not disclosed. 
AT&T paid some $3.9 billion for Sterling in 2000; 
IBM is expected to pay about $1 .4 billion for the 
unit. An AT&T spokesperson justified the sale, 
noting that Sterling was "no longer core" to the 
parent company's long-term objectives. The deal 
is expected to close sometime in the second half 
of the year. 






















I Media 
Tablets 
Poised 
For Growth 




Industry analysts 
at IDC expect ship- 
ments of media 
tablets (devices 
defined as having touch- 
sensitive screens, lacking keyboards, 
and running a light OS) to grow dramatically 
through 2014. In IDC's "Wortdwide and U.S. 
Media Tablet 201 0-201 4 Forecast," the firm 
claims that more than 46 million of the devices, 
including Apple's iPad, will ship in 2014. For 
2010, IDC only expects 7.6 million of the de- 
vices to ship. Between now and 2014, tablets 



will experience a healthy compound annual 
growth rate of 57.4%, largely driven by third- 
party applications. Another analyst, Display- 
Search, revealed that 606 million touchscreens 
shipped last year. DisplaySearch's 2010 Touch 
Panel Market Analysis report indicates that 
touchscreen shipments (used in devices such 
as mobile phones, MPS players, and GPS 
devices) jumped 29% for the year compared to 
2008. Last year, more than half (376 million) of 
all touchscreens shipped went into cell phones. 

I Mobile Phones Had A Good Quarter 

According to Gartner, 314.7 million mobile 
phones and smartphones sold wortdwide in 
the first quarter of 2010, representing a 17% 
increase compared to the same period in 2009. 
Smartphones did particularly well, as sales 
improved 48.7% to 54.3 million units sold, large- 
ly thanks to high demands and lower prices. At 
the time of the report, Nokia maintained a 35% 
wortdwide market share, followed by Samsung, 
LG, Research In Motion, and Sony Encsson, at 
20.6%, 8.6%, 3.4%, and 3.1%, respectively. In 
01 2010, smartphones sold better year-over- 
year than they have since 2006. 

I Symantec To Acquire Verisign's 
Identity & Authentication Business 

Symantec has agreed to pay VenSign $1 .28 
billion in cash to acquire the company's iden- 
tity and authentication business. Specifically, 
Symantec is buying VenSign's Secure Sockets 
Layer Certificate Services, Public Key Infra- 
structure Services, VeriSign Trust Services, 
and the VeriSign Identity Protection Authen- 
tication Service. Symantec says the acquisi- 
tion, which should be completed during the 
September quarter, will help the company 
improve its identity security products for both 
businesses and individuals dunng a time 
when security threats continue to evolve. Incor- 
porating Verisign's identity and authentication 
business will also help Symantec 
focus on identity security, mobile 
and other device security, 
information protection, 
context and relevance, 
and cloud secunty, the 
company says. 




I Dell Shows Positive Growth 

Dell reported total revenue of $14.9 billion for 
the quarter that ended Apnl 30, up 21% from 
a year ago, and a non-GAAP income of $824 
million, up 29% over the same time penod. 
Dell's servers, storage, and services contrib- 
uted $4.2 billion in revenue. The company 
reported strong results in each of its business 
units. Large Enterpnse revenues were up 25%, 
with a 61% increase in server revenue and a 
44% increase in services revenue. Revenue 
from the Public business unit was up 22%, 
Small and Medium Business was up 19%, and 
Consumer revenue was up 16%. 

I EU Fines Chipmakers For Price Fixing 

The European Commission fined nine semi- 
conductor manufacturers more than $404 mil- 
lion after the companies admitted to illegally 
fixing pnces for DRAM memory chips. The 
companies received a 10% reduction in their 
fines for acknowledging their participation in a 
cartel. The commission says the cartel, which 
included Samsung, Infineon, Hynix Semicon- 
ductor, Elpida Memory, NEC Electronics, 
Hitachi, Toshiba, Mitsubishi Electronics, and 
Nanya Technology, operated between 1998 
and 2002. The companies shared secret infor- 
mation that allowed them to coordinate prices 
for DRAM chips sold to computer manufactur- 
ers such as HP and Dell. 
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Are you looking to learn more about data center 
or IT topics? Network with some of your peers? 

Consider joining a group of data center 
professionals. If you have an event you'd like 
listed, please send an email to 
feedback@processor.com. 



- JUNE- 

7x24 Exchange 
Spring Conference 
June 6-9 
Boca Raton Resort and Club 
Boca Raton, Fla. 
www.7x24exchange.org/spring10/index.htm 



AITP Garden State 
June 8 

Jim Johnston's Steakhouse 
58 Eisenhower Parkway Mountain Plaza 
Roseland, N.J. 
tech.groups.yahoo.com/group 
/aitpgardenstatechapter 



AITP Richmond 
June 8 
2015 Staples Mill Road 
Richmond, Va. 
www.aitprich.org 

PASS Wisconsin 
SQL Server User's Group 
June 8, 4:30 
Microsoft Office 
2176 Woodcrest Drive 

Green Bay, Wis. 
wisconsin.sqlpass.org 



VMware Vsphere: 
Troubleshooting 
June 8, 9 a.m. 
Platform Labs 

1275 Kinnear Road 
Columbus, Ohio 

www.platformlab.org 



AITP San Diego 
June 9, 5:30 p.m. 
National University-Kearny Mesa Campus 
3678 Aero Court 
San Diego, Calif. 
sandiego.aitp.org 



Greater Wheeling AITP 
June 9 
Wheeling, W.Va. 
www.aitp-wheeling.org 

ISSA Parsippany 

June 9 
Deloitte Services 
100 Kimball Drive 
Parsippany, N.J. 
nj.issa.org 



ISSA San Diego 

June 9 
San Diego, Calif. 
www.sdissa.org 



Southern New England 
SQL Server User's Group 
June 9 
www.snessug.com 

AITP Washington D.C. 

June 10, 6:30 p.m. 

Alfio's Restaurant 

4515Willard Ave. 

Chevy Chase, Md. 
aitpwashdc.ning.com 



ISSA Northeast Ohio 
June 10 

Cuyahoga County Library-Parma South 
7335 Ridge Road 

Parma, Ohio 
www.neoissa.org 



SQL Server Society 
of Las Vegas 
June 10 

The Learning Center of Las Vegas 
777 North Rainbow 
Las Vegas, Nev. 
sssolv.com 



AITP Pittsburgh 
June 14 
Slovak Catholic Sokol 
205 Madison St. Road 
Venetia, Pa. 
www.aitp-pgh.org 
AITP's Association 
Outstanding Cliapter 
Award Winner 



For more Upcoming IT Events, see page 10. 
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The Processor Product Releases section 
includes brief overviews of data center products. 

All products listed have been released recently, so use this section to get 
up-to-date with what's new on the market and to find products you need. 




Clients 



■ Clerity UniKix 
Mainframe Rehosting Software 

Clerity is a full-service provider of main- 
frame migration, modernization, and opti- 
mization solutions. Drawing from more 
than 16 years of experience and a track 
record of success at more than 1,300 sites 
worldwide, Clerity 's robust mainframe 
rehosting software and migration technolo- 
gies protect and extend investments in 
business logic, data, and procedures. 

^ SOLUTIONS, INC 

UniKix mainframe rehosting software 
from Clerity provides a mission-critical 
environment for deploying IBM® CICS® 
applications, IBM® IMS® transactions, 
COBOL programs, Batch/JCL, and other 
legacy assets onto open systems. By 
rehosting applications off the mainframe, 
IT flexibility is enhanced and service lev- 
els are protected, improving time to market 
and dramatically reducing TCO. For more 
on this product, see page 37. 

■ HyperOffice Collaboration Suite 

HyperOffice released a version of its 
cloud computing messaging and collabo- 
ration suite for small and medium-sized 
enterprises. The company says the suite 
provides entrepreneurs with software 
tools and support services to launch new 
ventures from any Web-enabled comput- 
er, smartphone, or mobile device. It also 
gives SMEs expansion abilities and fea- 
tures Ajax and various Web 2.0 tech- 
nologies that improve performance, 
scalability, and security. 

■ Motion Computing F5v Mobile Field Tool 
& C5v Mobile Clinical Assistant 

Motion Computing announced the 
release of its F5v Mobile Field Tool and 
C5v Mobile Clinical Assistant, the first 
slate tablets to run on Intel Core vPro 
processors. The devices are built to be 
lightweight but rugged — both tablets 
meet MIL-STD-810G and IP-54 stan- 
dards. The machines are aimed at mobile 
professionals across vertical industries 
such as health care, construction, and 
field service. They run either Windows 7 
or Windows XP, so they can integrate 
seamlessly into an enterprise and run the 
same applications and utilities as office- 
based employees, thus reducing the load 
on IT personnel and infrastructure. 

■ Quest Software Microsoft SharePoint 
Server 2010 Solutions 

Quest Software announced a suite of 
Microsoft SharePoint Server 2010-ready 
tools designed to make preparing, 
migrating, managing, and customizing 
SharePoint Server 2010 easy. Features 
include detailed premigration assess- 
ments to help customers simplify their 
migrations, plan their target environ- 
ments, and save time and money. 

■ SAP NetWeaver CE 7.2 

SAP released a new version of the 
SAP NetWeaver Composition Environ- 
ment offering, the SAP NetWeaver CE 
7.2. It lets customers add to existing IT 
installations, coordinate new business 
processes, and obtain increased visibility 



throughout the company to help per- 
sonnel make impactful decisions for 
the enterprise. 

■ Servoy 5.2 

Servoy has released an open-source 
version of its Servoy 5.2 SaaS platform, 
which Servoy says supports "SaaS and 
Back" hybrid applications deployable via 
cloud computing and onsite via browser 
and native client interfaces. Under the 
AGPL license, the source code for 
Servoy Developer, Servoy Smart Client, 
and Servoy Web Client will become 
open-source in version 5.2. 

■ Themis Computer Mission 
& Payload Systems Initiative 

Themis Computer announced its MPSI 
(Mission and Payload Systems Initia- 
tive), which is designed to provide inte- 
grated system solutions and value-added 
services to Themis military and aero- 
space customers. The MPSI target appli- 
cations include UAV sensor processors, 
data processing and recording units, mis- 
sion computers, display processors, and 
EW/SIGINT suite controllers. 

■ Wyse Technology 

Support For Windows Embedded Standard 7 

Wyse Technology supports Microsoft's 
Windows Embedded Standard 7 to deliver 
Windows 7 in a customizable and compo- 
nentized form for a family of Wyse thin 
clients. Windows Embedded Standard 7 
also includes Windows Aero and RDP 
(Remote Desktop Protocol) 7.0 to provide 
connectivity to Windows Server 2008 R2 
and virtual desktop infrastructure scenarios. 



Networking & VPN 



■ Acme Packet 

Net-Net 3820 Session Border Controller 

Acme Packet released the Net-Net 3820 
session border controller for small and 
midsized IP communications service 
providers. The NEBS -compliant platform 
supports up to 8,000 sessions and can be 
configured as a Net-Net Session Director 
or Net-Net Signaling Firewall. It can also 
be used as a session routing proxy. 

■ Citrix Systems Citrix Cloud Solution 

Citrix Systems released a portfolio 
of solutions aimed at allowing cloud 
providers to deliver business services. 
The portfolio includes the Citrix Cloud 
Compliance Solution, which protects sen- 
sitive data in private and public clouds, 
and is based on an open framework that 
allows cloud providers to add their own 
innovations to each solution. 

■ Citrix XenClient 

Citrix announced the public release of 
Citrix XenClient. The client-side virtual- 
ization solution lets centrally managed 
virtual desktops operate on corporate 
computers, regardless of whether they 
are connected to the network. Citrix 
XenClient, which was developed in col- 
laboration with Intel, has Intel vPro hard- 
ware virtualization technologies built into 
its bare metal architecture. 

■ Citrix XenServer 5.6 

Citrix introduced Citrix XenServer 5.6. 
The release offers centralized multinode 
management, multiserver resource shar- 
ing, and full live migration. Addition- 
ally, it offers enterprise enhancements 



designed to expand host memory, CPU, 
network, and operating system support. A 
free edition of XenServer 5.6 is available 
as well as XenServer 5.6 Advanced, 
XenServer 5.6 Enterprise, and XenServer 
5.6 Platinum. 

■ Codima Toolbox All In One 

Codima's Toolbox All In One delivers a 
set of effective network management tools 
geared toward managing the total network. 
The tools are available in an All In One 
Toolbox bundle or in separate toolboxes: 
Codima IT Inventory & Mapping Tool- 
box, Codima IT Engineer Toolbox, 
Codima VoIP Readiness Toolbox, and 
Codima VoIP Monitoring & Trouble- 
shooting Toolbox. 

■ Firetide Wireless Bridge 100 

Firetide announced its Wireless Bridge 
100 family of outdoor wireless Ethernet 
bridges, which are software configurable 
for 2.4GHz, 5GHz, and 4.9GHz and capa- 
ble of up to 35Mbps of throughput. The 
FWB-102 features two FWB-100 nodes 
and built-in 2.4GHz antennas; the FWB- 
105 includes 4.9GHz and 5GHz external 
antennas. Both start at less than $1,000 
and $1,500, respectively. 

■ InMage Cloud-Optimized Infrastructure 

InMage announced cloud-optimized 
infrastructure solutions that leverage 
"cloudbursting" for cloud providers want- 
ing to expand their service offerings. The 
cloud-optimized infrastructure makes 
transferring application services and data 
into and out of the cloud automatic. 
InMage's cloudbursting technology 
addresses disaster recovery, administra- 
tion, and production offloads. 

■ Linxter MonitorGrid 

Linxter released MonitorGrid, a service 
that monitors performance, storage, and net- 
work activity of Microsoft servers no matter 
their network or domain. MonitorGrid runs 
on Azure and offers secure two-way com- 
munication between servers and the ser- 
vice's interface. The service also supports 
on-demand and scheduled remote restarts, 
multiple users, and transferring files from 
one to numerous servers. 

■ ManageEngine NetFlow Analyzer 8 

ManageEngine released NetFlow Ana- 
lyzer 8, its Web-based traffic analy- 
sis and network forensics application. 
NetFlow Analyzer 8 can now monitor 
VoIP using IPSLA to keep track of VoIP 
performance metrics. It also includes 
support of SNMP v3 and the ability to 
inspect NBAR (Network Based Appli- 
cation Recognition) traffic generated by 
Flexible NetFlow. 

■ Perle 10/100/1000 
Ethernet-To-Fiber Media Converters 

Perle announced a new line of 10/ 
100/1000 Ethernet-to-fiber media con- 
verters. The media converters allow 
users to add the benefits of fiber to their 
copper-based UTP network, Perle says. 
The media converters have an onboard 
microcontroller that handles error detec- 
tion and recovery. 

■ Uptime Software up.time 5 

Uptime Software released version 5 of 
its up.time tool for monitoring enterprise 
infrastructure and applications, up.time 5 
adds more than 20 deep VMware metrics. 



including Memory Balloon, Percent Wait, 
and Memory Zero to help you avoid 
instance contention. To stop overprovi- 
sioning, up.time 5 can report on the total 
VMs and rates of growth over time, and it 
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Uptime Software 

can do so over a global or data center 
level. The addition of Watch Instances 
VMotion lets you monitor instances as 
they move automatically from platform to 
platform. Version 5 also offers live dash- 
boards and reports across multiple data 
centers and platforms. For more on this 
product, see page 7. 

■ Wyse Technology Wyse Zero 

Wyse Technology released the Wyse 
Zero engine, which is software that helps 
to simplify the development of cloud-con- 
nected devices. Wyse Zero connects users 
to cloud computing services and virtual 
desktops with efficient communications 
and protocol technology. The Wyse Zero 
engine powers all devices that utilize the 
Wyse ThinOS, implementations of Wyse 
PocketCloud, and Wyse Xenith devices. 



Physical Infrastructure 



■ Chloride MODI Series 

Chloride announced its MODIO Series, 
a three-phase UPS system. The MODIO 
features a scalable rack-mounted design, 
and users can add up to 50kVA or 
lOOkVA 2U-sized modules, depending on 
the frame size chosen. The MODIO can be 
installed without shutting down the sys- 
tem. The MODIO UPS system comes with 
built-in SNMP/Web/network connectivity 
for remote access. 

■ Server Technology & Modius OpenData 

Server Technology announced a com- 
prehensive integration of SPM (Sentry 
Power Manager), Sentry Smart, and 
Switched Power Distribution Units with 
Modius OpenData for centralized data 
center monitoring and analysis. These 
products, along with Server Technology's 
SPM v4.2 appliance, are integrated with 
Modius' OpenData 3.2 system using 
Server Technology's API. 

■ Wright Line Rack Hygiene 

Wright Line announced Rack Hygiene, 
a classification for data center energy 
management that will describe the care in 
which the data center rack envelope is 
designed, controlled, and maintained. The 
Rack Hygiene concept encompasses the 
identification, analysis, and repair of hot 
air leakage areas/infusion paths and cold 
air bypass routes within and around indi- 
vidual data center racks. 



Security 



■ CipherOptics 

CipherEngine Enforcement Point 

The CipherEngine Enforcement Point 
group encryption appliances from 
CipherOptics have been FIPS (Federal 
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Information Processing Standard) 140-2 
certified. The company says the Cipher- 
Engine Enforcement Point appliances are 
the first FIPS 140-2-certified products that 
offer multilayer IPsec VPN capabilities in 
a single appliance. 

■ Cyberoam Version X 

Cyberoam announced the release of its 
new firmware, Version X, designed to 
strengthen existing Cyberoam UTM 
and remove the clutter found in some 
UTM appliances. The firmware's fea- 
tures include ESA (Extensible Security 
Architecture), Application Layer 7 Man- 
agement, 3GAVWAN connectivity, securi- 
ty for HTTPS/SSL traffic, IPv6 support, 
and a new user interface. 

■ Fortinet FortiGate-3950B 

& FortiGate-3951 B Appliances 

Fortinet launched the FortiGate-3950B 
and FortiGate-3951B multithreat security 
appliances that consist of a firewall, an 
intrusion prevention system, and advanced 
application-based security protection. 
Features include the FortiOS 4.0 MR2 
operating system, FortiASIC processors, 
and a modular architecture. Ideally suited 
to large enterprises, the new FortiGate 
appliances will be available by the end of 
the quarter. 

■ GFI Software IVIail Essentials 2010 

GFI Software announced the latest ver- 
sion of its antispam software, Mail- 
Essentials 2010. MailEssentials 2010 uses 
two antispam filters to reach a capture rate 
of 99%, GFI says. New 
features include the abili- 
^^^PB ty to quarantine spam 
^y^PI emails in a database and 
have them automatically 
deleted. MailEssentials 
2010 also has dashboard entries that can 
be filtered by sender, recipient, subject, or 
message ID; an antispam filter and 
whitelist log files that can be rotated based 
on size or time; and an improved detection 
method of email disclaimers to avoid dis- 
claimer repeats. 

■ Imperva SecureSphere Virtual Appliances 

Imperva announced its SecureSphere 
Virtual Appliances, which are designed 
to offer the same features as its hardware- 
based products, including best-of-class 
security protection, compliance and risk 
management, flexibility, speedy deploy- 
ment, and the ability to easily provision 
and configure security services. The vir- 
tual appliances are able to satisfy the 
security needs of dynamic and virtualized 
enterprise environments and offer Web 
application and database firewalls and 
database activity monitoring. They can 
be installed on any hardware running 
VMware ESX. Other features include 
enhanced inspection and protection of 
Web and database servers and support for 
VMware VMotion. 

■ Juniper Networks AppTrack, AppSecure 
& Junos Space Security Design 

Juniper Networks released data center 
security products designed to reduce cost 
and difficulty and increase applica- 
tion visibility in the enterprise. The prod- 
ucts include Juniper Networks AppTrack 
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software, AppSecure software, and Junos 
Space Security Design software; they are 
engineered to work with the SRX Series 
Services Gateways. Juniper Networks 
also released an OEM version of the 
Juniper SRX series via IBM and joined 
with FireEye to provide malware protec- 
tion. These products let Juniper cus- 
tomers distribute security resources to 
secure the changing traffic flows scaled 
over 120Gbps using just one platform. 

■ nCircle Perimeter Profiler 

nCircle announced the nCircle Per- 
imeter Profiler, a cloud-based virtualized 
appliance that enables organizations to 
assess their Internet-facing assets from an 
external perspective. Perimeter Profiler 
extends the reach of nCircle IP360 to 
include external assets and their related 
network, operating system, and Web 
application vulnerabilities. Because it is 
fully integrated, customers get a consoli- 
dated view of their entire network using 
the same objective metrics to measure 
their external security as they use with 
their internal security. The IP360 suite 
provides you with a 360-degree view of 
your Internet-facing assets. 

■ StillSecure ProtectPoint Log Management 

StillSecure announced ProtectPoint 
Log Management service, which consoli- 
dates and organizes log events from 
network systems, providing detailed visi- 
bility into the network to ensure that 
critical events are investigated and, if 
necessary, remediated. The service pre- 
vents breaches by locking down systems 
and bringing them into compliance with 
regulatory requirements, providing real- 
time regulatory reporting. 

■ Wright Line Rack Hygiene 

Wright Line announced Rack Hygiene, 
a classification for data center energy 
management that will describe the care 
with which the data center rack envelope 
is designed, controlled, and maintained. 
The Rack Hygiene concept encompasses 
the identification, analysis, and repair of 
hot air leakage areas/infusion paths and 
cold air bypass routes within and around 
individual data center racks. 

■ Symantec Hosted Endpoint Protection 

Symantec announced a cloud solu- 
tion called Symantec Hosted Endpoint 
Protection. Designed for small to medium- 
sized enterprises looking for additional 
computer system security without addition- 
al hardware or software, Symantec Hosted 
Endpoint Protection gives users the ability 
to protect their Windows-based laptops, 
desktops, and file servers from threats. 



Servers 



■ Oracle Sun Netra 6000 

Oracle introduced the Sun Netra 6000 
carrier-grade server ideally suited to the 
demands of media services delivery and 
operations and business support systems in 
the communications industry. The server 
features advanced blade networking, sim- 
plified management. Network Equipment 
Building System certification, and extend- 
ed lifecycle support. 



Storage 



■ Adaptec MaxlQ SSD Caching Portfolio 

Adaptec announced that it is expanding 
its portfolio of MaxIQ SSD Caching prod- 
ucts with three new storage controllers, a 
MaxIQ 64GB Cache Performance kit, 
wider support for SSDs, and advanced 
management and analytics tools. Each 
Adaptec MaxIQ storage controller features 



1.2GHz of processing power and 512MB 
of DDR2 write cache. 

■ Caringo CAStor 4.0 

Caringo released version 4.0 of its ob- 
ject storage platform, CAStor. CAStor' s 
features include improved operational and 
reporting efficiency and a power conserva- 
tion technology called Darkive. The tech- 
nology automatically spins down disks 
and reduces CPU utilization based on 
parameters set by administrators. 

■ Coraid EtherDrive Z-Series 

Coraid announced its EtherDrive Z- 
Series NAS appliance, which marries the 
128-bit ZFS file system to the company's 
Ethernet SAN technology. It's available in 
two configurations with either four-core or 
eight-core processing; the latter version 
comes with more RAM and an SSD cache. 




Coraid EtherDrive Z-Series 

Starting at about $1,000 per terabyte, the 
EtherDrive Z-Series is designed to deliver 
a high performance-to-price ratio, the 
company says. Its connectivity includes 
multiple lOGbps or IGbps port options. 
The deduplicating appliance employs 
sophisticated integrity checks to detect and 
correct data corruption. It also supports 
thin provisioning, automatic tiering 
(SSDs), and unlimited snapshots. 

■ Diskeeper Disk Performance Analyzer 
For Networks 3.0 

Diskeeper Corporation Disk Perfor- 
mance Analyzer For Networks® 3.0 is a 
free utility that network administrators can 
use to detect fragmentation on the com- 
puters across their networks. The Disk 
Performance Analyzer can help network 
administrators make their enterprise's 
systems faster, more reliable, and longer- 
lasting while improving productivity and 
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reducing the cost of network cleanup after 
fragmentation. Once Disk Performance 
Analyzer has been used to evaluate the 
level of fragmentation on the computers in 
a network, administrators can utilize addi- 
tional Diskeeper products to defragment 
and prevent future fragmentation. For 
more on this product, see page 3 1 . 

■ EMC Data Domain Boost 

EMC introduced its latest Data Domain 
Boost software, which distributes parts of 
the deduplication process to the backup 
server to accelerate backups. The offering 
is also capable of significantly reducing 
load on backup LANs and backup serv- 
ers. DD Boost is currently available for 
Symantec NetBackup and Backup Exec, 
but not until the second half of 2010 for 
EMC NetWorker users. 

■ EMC lonix 

Storage Configuration Advisor 2.0 

EMC unveiled the latest version of its 
lonix Storage Configuration Advisor. 



Version 2.0 supports agentless discovery 
and deployment, validates storage config- 
urations in physical and virtual environ- 
ments, and produces detailed reports and 
trend analysis that improve storage change 
and configuration management processes. 

■ EMC VPLEX 

EMC announced its EMC VPLEX tech- 
nology, which provides nondisruptive, 
transparent data access and mobility 
across EMC and non-EMC storage plat- 
forms. EMC says the technology simpli- 
fies recurring information movement and 
improves storage utilization. VPLEX tech- 
nology features a single cluster of up to 
four VPLEX engines with support for up 
to 8,000 virtualized storage volumes. 

■ Enhance Technology 
EnhanceRAID E400 FR 

Enhance Technology released the En- 
hanceRAID E400 FR, a cable-less four- 
bay USB, Fire Wire, and eSATA combina- 
tion of RAID storage arrays for 3.5-inch 
SATA hard drives. The unit includes an 
LCD keypad control panel, true hardware 
RAID 5 data protection, and integrated 
multiple-host connectivity. The E400 FR 
supports 2TB worth of SATA II drives. 

■ Iron Mountain Mimosa NearPoint 
For Dell DX Object Storage Platform 

Iron Mountain announced that its 
Mimosa NearPoint email archiving product 
is certified for Dell's DX Object Storage 
Platform, which is a file and digital content 
access, distribution, and storage appliance. 
The joint offering automatically archives 
email directly to the platform, enabling 
users to appropriately manage risk-relevant 
data and comply with Exchange and 
e-discovery requirements. Users can also 
employ custom retention policies and 
secure data using the unified system. 

■ Iron Mountain 

Stratify Legal Discovery OnPoint 

Iron Mountain announced Stratify Legal 
Discovery OnPoint, a hosted e-discovery 
tool designed to simplify e-discovery and 
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reduce costs with free processing and 
loading of unlimited data for early stage 
filtering. Features include hands-on data 
control, advanced analytics and filtering, 
and a one-time fee of $500 per gigabyte 
for reviewable data only. 

■ LSI Engenio 2600 

LSI released the Engenio 2600, an entry- 
level external modular storage system that 
features four native 6Gbps SAS host inter- 
faces and multiprotocol host connectivity. 
It can supply up to 40,000 I/Ops and up to 
4GBps bandwidth for OLTP, transaction 
processing, and other intensive applica- 
tions. It's also scalable to up to 96 drives. 

■ NetApp SnapManager 6.0 
For Microsoft SharePoint 2010 

NetApp unveiled SnapManager 6.0, a 
storage and data management solution that 
enables seamless customer migrations to 
Microsoft SharePoint 2010. This release 
offers a flexible and reliable storage infra- 
structure to support SharePoint Server 
2010 environments. The product provides 
SharePoint Server 2010 customers with 
policy-based management of their data. 

■ Neverfail 

For Microsoft SharePoint Server 2010 

Neverfail has released a product for 
Microsoft's SharePoint Server 2010 that 
Go to Page 5 
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Prepare For The Unexpected With Room Alert 



^J^ii one knows when or how disaster will 
slrilce. We jusl know the potential is always there. 
So preparation is crucial to ininimizing iLs impact 
on computers, networks, users & business. 

When disasters occur, there are significant 
costs in areas that go far beyond the simple 
replacement of damaged hardware. Ihis is 
because what happens in the data center or other 
facility effects the entire organiziition. If disaster 
strikes your facility, how will it impact business? 
Who will gel the blaine? Could it have been 
prevented? What will it cost? 
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Room Aleii products can niniiitnr; 


• Temperature 


• Smoke /Fire 


' Humidity 


■ Air Flow 


• Heat Index 


• Sound, Light 


■ Main / UPS Power 


■ Panic Buttons 


• Flood /Water 


• Dry Contacts 


' Room Entry, Motion 


' Switch Sensors 


■ IP Network Cameras 


■ Wireless a More 



AVTECH has a full line of powerful, scalable 
Room Ali'i f solutions for real-time 
environment monitoring in a computer room, 
data center or other facility. All models 
arrive assembled with easy to in.stall 
hardware, cables, sensors, easy-to-use 
logging & alerting software, printed 
docuinentation, unlimited technical support 
and a '30-Day Satisfaction Guarantee'. Users 
can typically install in under 1 minutes. 

Room Alert products monitor critical 
environment conditions like temperature, 
power, humidity, flood, smoke, room enXvy, 
air flow, motion and more, alert staff by any 
method and can take automatic corrective 
action. There is a model that is right for any 
organization and budget... yours too! 

Call or Visit Us Online Today 



A.AVTECH 



888.220.6700 • 401.628.1600 
AVTECH.com 



Protect Your IT Facility... Don't Wait Until It's Too Late! 
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SAVES TIME, 

SAVES ENERGY, 

SAVES THE ENVIRONMEN" 


Green Award 
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Cyber Switching's new ePower family is targeted at data center 
managers searching for greener solutions which integrate rich 
features while providing unsurpassed reliability and great value. 

• Coiar LCD Touchscreen 

- Enhanced productivity - interactive screen allows for local management 

- Quick and easy setup - configure network access within 5 minutes with no laptop needed 

• Cyber Breaker® the Virtual Circuit Brealter 

- "Trips" an individual outlet when the amperage exceeds a user-defined threshold 

- Limits overcurrent conditions to a single outlet, protecting equipment 

- More freedom with faster response times and user-deflnahle trip cun/e 

• Individual Cutlet Power Metering and Control 

- Utility-grade metering and control (±2% accuracy) 

- Track usage and reduce costs when enrolling in 
Utility Company Incentive Pragrams 

• Demand/Response Load Shedding 

- Proactively shed loads manually or enroll In AutoDR program 

- Protect your mission-critical applications during Demand/Response events 

• Two High-Speed USB ports 

- External peripherals: environmental sensors, web cams, flash drives, hubs, etc 

• Slimmest PDU with Individual Outlet Metering on the Marl(et 

- Product depth only 2.25 inches thick 

• 60+ High Density PDU Configurations 

- Wye and Delta 3$ inputs from 4.2 kW to 27.3 kW 

Contact: sales@cyberswitching.com or (888) 311-6277 to place your order or for more information 




Continued from Page 5 
provides application-aware high avail- 
ability and disaster recovery for all 
SharePoint Server elements, including 
database and application servers with 
search and index servers. Neverfail says 
its approach covers SQL Server databas- 
es, file system content, and Microsoft 
Exchange to provide farm failover. 

■ Paragon Software Group 
Partition Manager 11 

Paragon Software Group released version 
1 1 of its partitioning software, Group 
Partition Manager. The software comes in 
four editions: Personal, Professional, Server, 
and Virtual Server. As the last implies, cer- 
tain editions now support virtual drive parti- 
tioning. Also new are system migration 
support and the Paragon Alignment Tool, 
which can increase performance and drive 
lifespan, the company says. 

■ ParaScale Cloud Storage 2.5 

ParaScale released version 2.5 of its 
ParaScale Cloud Storage, which delivers 
advanced features for cloud scale data secu- 
rity, protection, and accessibility. It includes 
features to efficiently address 'big data' 
requirements by enabling data services and 
application integration directly onto storage 
nodes. ParaScale Cloud Storage is built to 
meet the needs of enterprise data centers or 
managed hosting providers. 

■ QLoglc inifinlBand Fabric Suite 6.0 

QLogic released the latest version of 
InifiniBand Fabric Suite 6.0. The software 
package includes Virtual Fabrics, which 
automatically dedicate classes of service to 
applications within the fabric. It also fea- 
tures Adaptive Routing, which optimizes 
traffic flow, and Dispersive Routing, 
which load-balances traffic among multi- 
ple pathways. 

■ Quantum DXi4500 
Disk Backup Appliances 

Quantum released its DXi4500 disk back- 
up apphances, the DXi4510 and DXi4520. 
Each is designed for support backup, dedu- 
plication, and replication. The appliances 
also enable remote office tape replacement 
and Symantec OpenStorage API, and they 
provide a single point of management 
across storage tiers. The DXi4510 features 
2TB of capacity, and the DXi4520 provides 
4TB. Both appliances offer RAID 6 protec- 
tion and up to 400GB per hour data ingest 
performance. They also support encrypted 
and compressed replication streams for up 
to 99% bandwidth savings, Quantum says. 
The DXi4510 costs $12,500, and the 
DXi4520 is $22,500. 

■ Sans Digital MobileNAS MN4LA+B 

This four-bay NAS is powered by a 
1.66GHz dual-core Intel Atom processor 
and comes in a tower chassis. It supports 
RAID 5/6, real-time folder replication 
between NAS devices, iSCSI (initiator and 
target), and scheduled snapshots. Sans 
Digital says the MobileNAS MN4LA-I-B is 
an SMB device with enterprise features. 




■ SGI InfiniteStorage 

SGI has entered into an initiative with 
LSI to widen its SGI InfiniteStorage prod- 
uct line with LSI-powered configurations. 
The move includes entry-level and mid- 
range enterprise RAID-based products 



with support for iSCSI, Fibre Channel, 
InfiniBand, and SAS and is application- 
ready for Oracle Database; VMware; and 
Microsoft SQL Server, Exchange, and 
SharePoint. The products have the ability 
to integrate with SGI's compute line 
environments, function as standalone 
storage, and integrate with compute lines 
available from other OEMs. The initia- 
tive will also give SGI partners access to 
LSI product data. Products within the 
SGI InfiniteStorage SP (Select Product) 
line include the InfiniteStorage 220-SP, 
InfiniteStorage 4100-SP, and Infinite- 
Storage 4600-SP. 

■ Stonesoft StoneGate IPS-1205 

This intrusion prevention appliance is 
made to protect data center services and 
intranets from internal, client-side threats 
(such as worms, drive-by infections, and 
malware on unauthorized removable 
storage) without hampering the speed of 
a IGbps network. The scalable appliance 
also covers servers with virtual patching 
until maintenance can take place. 

■ Synology DiskStation DS210+ 

Synology released the Synology Disk- 
Station DS210-I-, a secure NAS server for 
mobile or branch offices. Designed for 
SMEs with limited IT resources, the 
DiskStation DS210-I- can replace PC net- 
work servers, Synology says. Features 
include share-level encryption, cloud 
backup with Amazon S3, remote backup, 
and diskless configuration. 

■ SPAR Virtual Lock 

3PAR announced Virtual Lock, a tool 
designed to help users of 3PAR InServ 
Storage Server meet data governance 
and electronic discovery requirements. 
Features include the ability to apply a 
configurable retention period to virtual 
volumes and volume copies and protect 
them against deletion, be it accidentally 
or maliciously. 

■ Unitrends Release 5 

Unitrends announced Release 5, the 
latest version of its backup appliance 
software. The release features data dedu- 
plication, vStorage-based VMware ESX 
and ESXi Backup, and new features for 
its disk-to-disk-to-disk archiving system. 
Release 5 is compatible with more than 
100 different operating system versions 
and applications and features a new SQL 
Server backup option. 
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Worried about what your 
data center is getting into 
when you^e not watching? 

Protect it from damaging heat, tiumidity, smoke, 
gasses, and unwanted intrusion. 



Why navigate through countless Web sites when you can get all 
the information you need in just a few minutes by reading Processor! 
Processor's content is comprehensive, but it's presented in a 
quick, easy-to-read format, so you can keep up with the constant 
flood of new data center products and technologies. 




PDUs Direct 
To You 

Top Quality At Tlie Lowest 
Price Available 

by Blaine Flamig 

Premium power distribution without 
the premium price. Such a notion may 
sound too good to be true in today's sag- 
ging economy, but such an approach is 
precisely the customer-oriented mission 
PDUs Direct (www.pdusdirect.com) was 
built on and continues to operate by. 

As the online wholesaler of basic, 
metered, and switched PDUs from long- 
time PDU maker Server Technology's 
product line, PDUs Direct is dedicated 
to providing its customers the highest 
quality in-rack power strips, power dis- 
tribution, and rack PDUs offered at best- 
in-class prices. 

Established in November 2008 at 
the outset of the economic downturn, 
PDUs Direct understands the financial, 
cost-cutting challenges now facing 
SMEs. That's why PDUs Direct is com- 
mitted to supplying its customers with 
industry-standard, industrial-grade PDUs 
suitable for network and server environ- 
ments at prices falling 10 to 20% below 
competitors' online prices. PDUs 
Direct' s customer commitment extends 



contact 



PDUs Direct 

(888) 751-7387 
www.pdusdirect.com 
sales@pdusdirect.com 
(product, application, 
and order inquires) 
support® pdusdirect 
.com ('fec/7 support and 
return inquires) 



to the company's easy-to-use, unclut- 
tered Web site, which makes locating the 
right PDU a quick, streamlined process 
without skimping on the pertinent prod- 
uct information customers require. 

PDUs Direct' s dedication to its cus- 
tomers is seen through its next-business 
day shipping policy; 100% satisfaction, 
30-day money-back product guarantee; 
and ultra-convenient email and live chat 
technical support options. Whether the 
question or concern is in regard to a prod- 
uct, order, or application, PDUs Direct' s 
chat support pairs customers with live 
operators who possess years of real-world 
PDU experience and knowledge. Custom- 
ers can even request a chat transcript for 
reference following a chat session. 

PDUs Direct power distribution units 
are constructed in steel-case enclosures, 
available in a variety of outlet and 
power-level configurations, and ship 
with a customer-selected power cord. 
Each switched PDU sold also includes 
the latest firmware from Server 
Technology and fully networked outlet 
management and power and environ- 
mental monitoring abilities. 



PDUs 



direct 




You need the BEST 
Remote Physical Monitor 
(RPM) System you can buy. 



1 



No Software Required! 



Temperature/Humidity/Airflow/Dry Contact RIMS 

• Temperature, humidity, airflow sensors 

• Dry contact sensor auto-detects smol<e, water, security, and motion sensors 



Voltage RIMS 

• Power on/off/reboot 120V-250V x 2 power outlets 

• IVIonitor current draw on each outlet 

• Two I EC Connections 

• Each outlet is independent and can change state 

• Temperature sensor included 

Dry Contact RIMS (10 Port) 

• Monitor dry inputs; temperature sensor included 

• Auto-detect smoke, water, security, motion sensors 



Call (866) 207-6631 
for complete specs. 
You'll be glad you did! 

ir RACKMOUfT 

ir SOLUTIONS, LTD 



' where customer service matters. 




RS-232 RIMS 

• Monitor and control third-party power strips: 
APC®, Eaton®, Liebert®, BayTech®, Server Tech®, 
Powerware® (trademarks are properties of their respective owners) 

• Temperature sensor included 



866-207-6631 
sales@rackmountsolutions.net 
ISO 9001 : 2008 



UPTIME SOFTWARE - UP.TIME 



NEW PRODUCT 



by Nathan Lake 



An Easier Way To Monitor Enterprise 
Infrastructure & Applications 



When it comes to monitoring enter- 
prise infrastructure and applications, IT 
managers need a solution that provides 
deep and broad analysis over the entire 
virtual and physical infrastructure. And 
for efficiency, it's ideal for the tool to 
deliver a one-stop view of enterprise 
health. The delicate balancing act is 
exactly what uptime software's 'up. time' 
offers for midsized enterprises. 

From the single dashboard, up. time 
lets IT staff monitor the virtual and phys- 
ical environments for Windows, 
VMware, Solaris, AIX, Linux, HP-UX, 
Novell, and public cloud. You'll receive 
reports to help identify virtualization 
candidates and optimize VM density, 
which will let you get more out of each 
server. In terms of cost, uptime software 
offers per-physical server licensing with 
no tiers or add-ons, even in virtual envi- 
ronments — you'll only need to count the 
number of physical servers. And up.time 
can easily scale to monitor up to thou- 
sands of servers across one or multiple 
data centers. 

up.time also helps ensure you deliver 
proactive IT management for your enter- 
prise. For example, outage avoidance 
features alert you of problem infrastruc- 
ture and applications before they become 

t 

vD up.time 



an issue. Automated healing implements 
via thresholds that let up.time add or 
remove capacity as needed. You can also 
use up.time to graph capacity over time 
to optimize capacity and address poten- 
tial issues. 
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uptime software ■ up.time 

A tool for monitoring enterprise infrastructure and 
applications that lets you watch the entire IT environ- 
ment and identify which areas may cause concern. 

Additionally, up.time helps ensure 
service levels with its enhanced SLA 
monitoring and reporting tools. Start 
monitoring and reporting on SLAs in 
less than 10 minutes, up.time also pro- 
vides peace of mind by helping IT staff 
'dry-run' SLAs before they sign them. 

To download a 30-day free trial of 
up.time, visit www.uptimesoftware.com. 



(866) 735-4304 
www. uptimesoftware.com 
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Social Networking Nuisances 



Continued from Page 1 
can also be a launch point to attack 
and compromise other internal systems 
or databases." 

Twitter is also a well-known gathering 
place for all kinds of malware, to the 
point where the site had to create a filter 
to prevent legitimate and malicious users 
from posting links that led to known 
phishing sites or other malware. Fake sup- 
port emails purport to link the reader to 
Twitter but lead to spam or malware sites. 

Even scarier than the behavior of the 
hackers, though, is the behavior of the 
users. Social engineering doesn't work 
without the participation of the victims, 
and what users choose to share or allow 
others access to on social networking sites 
can expose them to social engineering. 
Criminals display ever more inventive 
ways to get users to offer information 
freely (if under false pretenses) that they 
then use to steal information or even 
money from the company. 

Not So Private 

As anyone who reads about Facebook 
or who visits it regularly will know, the 



site often adds new functionality that 
makes its users more visible to third par- 
ties — not their most sensitive informa- 
tion, necessarily, but more information 
about where they go, what they do, and 
what they click. Users on Facebook have 
to monitor these changes and make 
efforts to update their privacy settings to 
opt out of these new functionalities. 

Generally, privacy on these sites is 
an illusion, and a failure to understand 
that often leads to trouble for the users. 
"There's a natural trust of other users on 
the sites (because they are their friends, 
right?) as well as a belief that these sites 
have been built in a way to protect their 
privacy, which is often not the case," 
Prince says. "So the problems can be 
widespread, and educating employees on 
the dangers of these sites is the best way 
to reduce problems." 

In other words, as with email, it's 
important to warn users that what they 
think is private really isn't and that it can 
be a jumping-off point for hackers to 
capture their personal information. "It 
should always be assumed by users that 
any information they post on a social 



networking site can be seen by the en- 
tire world," Prince says. "Remind them 
to use a different username and pass- 
word for these sites than for other things 
like their online banking or work login. 
Too often users do this, and a criminal 
can figure it out on one site and use it 
on others." 

That issue is getting more urgent as 
users apply tools that unify all their com- 
munications and allow them to log in to 



- Perimeter E-Security's Kevin Prince 



all of their applications at once. "People 
are going to be looking for that and try- 
ing to take advantage of it," says Carl 
Herberger, vice president of information 
security and compliance services for 
EvolvelP (www.evolveip.com). 

Prince also warns of plug-ins and other 
sites and services that allow users to link 
to social media sites for easier or enhanced 
access. "These sites usually require your 
authentication, and these sites are compro- 
mised more frequently than the social 
media sites," he says. 

Filter Or Forbid? 

Web content filtering tools can be used 
to monitor how much employees are 
accessing which sites and how long 
they're on them. Those same tools can be 
used to block social networking sites, 
either specific ones or the whole catego- 
ry of social networking. 



But don't think that blocking is the 
answer, because even if it doesn't cause 
a revolt among salespeople or others who 
use these sites professionally, it can be 
difficult to screen all of them out. You 
can block Facebook and then find that 
users are accessing another site you've 
never heard of that has the same func- 
tions and risks associated with it. 

In that sense, policies are often the IT 
manager's most usable tool for limiting 



the damage these sites can expose the 
network to. When blocking them alto- 
gether isn't an option, policies that are 
communicated and enforced may screen 
the company from most of the potentially 
dangerous behaviors. "They can be a 
great tool for organizations, they just 
have to be controlled and managed prop- 
erly," Prince says. 

Herberger notes that policies are more 
effective when enforced, and that means 
testing. If you announce a policy about 
social networking sites and then fail to 
determine whether employees are com- 
plying with it, your lack of enforcement 
may breed contempt. "Routinely test for 
the behavior you're trying to promote or 
avoid," he says. "The first test drives 
home that you're trying to reduce risk, 
but it's only by the third or fourth test 
that you actually get acceptable levels of 
the behavior." 



Top Tip: Consider E-Discovery Requirements 

Although many of the threats involved with social networking are well understood, one emerging 
issue is e-discovery and forensics. It's much more difficult to perform these compliance-related 
functions when social networking is involved because social networking sites aren't set up to log 
who sees what or what is done at what time. "On sites like Linkedin, there are different applica- 
tions [and] different RSS feeds, people are scrolling over things, and there's no good log to track 
what they actually do and see," says Carl Herberger, vice president of information security and 
compliance services for EvolvelP (www.evolveip.com). "In the old days, if someone clicked on a 
link, they had read what was at that link. But now you can confirm that an application served up 
some information, but not whether the user read it; a person can be doing five different things in 
Facebook and it's impossible to tell what's happening." 



"It should always be assumed by users 

that any information they post 

on a social networking site 

can be seen by the entire world." 



Energy Options 



Continued from Page 1 
In addition to wind, the laboratory is 
involved in numerous research projects 
aimed at alternative energy, such as har- 
nessing ocean energy and tapping into the 
reserves of methane in the Earth's crust. 

Although solar and wind are the most 
discussed and implemented alternative 
energies, effort is being put into other 
forms, as well, such as hydro power, fuel 
cells, biomass, and geothermal. Each has its 
challenges but also potential. For example, 
in some smaller-scale applica- 
tions, fuel cells can be used to 
replace the traditional battery 
plant for long-runtime appli- 
cations. The power density of 
fuel cell stacks, coupled with 
very low maintenance and 
potential tax incentives, have 
made this power source one 
worth watching. 

Going Alternative 

In terms of implementation, 
there are some medium-sized 
and larger data centers and 
colocation facilities that have 
been exploring the use of 
alternative power. For exam- 
ple, Emerson Network Power 
(www.emerson.com) opened a 
new energy-efficient center 
last year in Missouri, with the state's 
largest solar array. When the 35,000- 
square-foot center went live, it was 31% 
more efficient than traditional data 
centers, thanks to the solar technology. 



precision cooling products, and other effi- 
ciency strategies. 

When Emerson first decided to build 
the center, it set out to achieve silver-level 
certification in LEED (Leadership in 
Energy and Environmental Design) but 
ended up garnering gold-level instead, 
according to Jack Pouchet, director of 
energy initiatives at Emerson. 

"We also knew the 7,800-square-foot 
rooftop solar array would contribute a 
portion of the energy needed to run the 
data center," he says. "We purposely ori- 
ented the building in such a way and put 
the array at an angle to the building struc- 
ture so that we could capture the most 



"Right now, the cost to get in is pretty 
high. But most likely, it won't be like 
that forever." 




This Emerson Network Power (www.emerson.com) data center is 31% more efficient 
than traditional data centers, thanks in part to its solar panels. 



amount of sun in the process." The result, 
he notes, is that the solar array covers up 
to 15% of the data center's load. 

The biggest challenge in terms of imple- 
mentation was an internal requirement that 



- Dimension Data's Kris Domich 



there be no penetration of the roof over the 
working data center, Pouchet notes. The 
solar array is anchored by a purpose-built 
super structure that's on a permanent tilt. 
He says, "As we were laying this out, we 
also made certain that we could get to the 
back side of the panels to 
wire them." 

One issue that usually 
crops up during the imple- 
mentation of rooftop en- 
deavors such as solar arrays 
is trees — not just because 
of shade but also because 
of the pollen and leaves 
that can blow onto the roof. 
Pouchet says that the build- 
ing sits back far enough to 
minimize the issue, and the 
amount of rain and slope of 
the array also work to keep 
the modules clean. 

Wind power is also spark- 
ing interest for data center 
use, especially in areas 
where wind farms already 
shuttle some power to re- 
gional customers. At Wyoming-based 
Green House Data (www. greenhouse 
data.com), for example, the 10,000- 
square-foot facility runs primarily on 
wind energy supplied by a local provider 



and is supplemented with power from a 
renewable energy firm about 6 miles from 
the center. 

The company's president, Shawn 
Mills, notes that power costs have stayed 
fairly flat as a result and that the data 
center is about 30% more efficient than 
traditional data centers. 

Lool(ing Ahead 

Although Green House is able to get 
nearly all of its power from local providers. 
Mills notes that it's an unusual case, 
because it was able to locate its facilities 
so close to a wind power provider and a 
renewable energy company. For most data 
centers, using alternative power doesn't 
mean making a clean break with the pow- 
er company. 

Instead, this type of power is now 
being used to increase efficiency and 
lower consumption costs, and most like- 
ly, it will take some time for smaller data 
centers to implement technologies that 
harness solar, wind, biomass, and other 
strategies in a way that's cost effective. 

"Right now, the cost to get in is pretty 
high," says Domich. "But most likely, it 
won't be like that forever. As more data 
centers start putting systems in place, 
and demand increases, hopefully the 
costs will start coming down." 
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When Wireless 
Goes Rogue 

Personal Wireless Access Points Can Spell 

Big Trouble To Otherwise Secure Enterprise Networks 



Key Points 



by Christian Perry 

In a world that demands 
Internet access anywhere and 
anytime, enterprises are in- 
creasingly encountering a de- 
vious foe: personal wireless 
access points. When wily em- 
ployees aren't satisfied with 
their employer's Internet ser- 
vice or simply want to go 
online on their own terms, they 
are turning to personal devices 
that can provide access any- 
where within the company 
walls. Although the use of per- 
sonal wireless access points 
might seem harmless to their 
users, they can create a head- 
ache of epic proportions for 
data center and IT managers. 

"It's never a good idea to 
connect something to a produc- 
tion network that has not been 
tested, most likely not config- 
ured properly, and doesn't meet corporate 
IT standards for security and network 
devices," says Martin Hack, executive vice 
president at NCP (www.ncp-e.com). "Aside 
from the fact that it's most likely a direct 
conflict with corporate information security 
policies, the potential issues range from net- 
work outages to corporate espionage and 
additional workload/troubleshooting for 
network and support staff" 

Personal Demons 

From a bird's-eye view, it's not tough to 
understand why employees are tempted to 
bring personal wireless access points into 
enterprise environments: They can provide 
Internet access for devices that aren't offi- 
cially approved by IT to connect to the 
enterprise network. Even if the devices are 
approved for company network use, 
employees might prefer the ease of using 
technology they're already familiar with 
using at home. Because consumer smart- 
phones and other mobile devices rarely 
leave the sides of many employees, it's no 
surprise that some seek creative ways to 
continue using them at work, regardless of 
security issues. 

"Home users, without understanding 
the technological and security considera- 
tions, may assume that just by plugging in 
a consumer-level access point at work, 
they can facilitate the same conveniences 
provided by wireless at home," says Dan 
Katz, president of Genesis Integrators 
(www.genesisint.com). "As most IT pro- 
fessionals know, this is a Pandora's Box 
of problems from both a security and net- 
working logistics perspective." 

According to Katz, wireless access 
points — whether installed by the IT depart- 
ment or secretly by employees — represent 
the easiest way for intruders to access a 
company network. Even if an IT department 
takes precautions to prevent access points 
from being plugged into a company net- 
work, employees can still connect to exter- 
nal networks while being hard-wired to the 
corporate network. Katz says this creates a 



Q 





Employees are increasingly turning toward 
personal wireless access points to skirt 
enterprise security policies and access 
social networking and other Web sites. 

These devices not only put employees at 
risk during company time but also can 
compromise company data, particularly 
when there is a bridged connection to the 
company network. 

A well-defined, well-enforced policy 
that outlines the use of personal wire- 
less access points is generally the best 
line of defense against these often 
undetectable devices. 



bridged or back-door opening on what 
might otherwise be a secure network. This 
is particularly common in organizations that 
block sites such as iTunes and Facebook, 
because end users can use these wireless 
access points to subvert security policies. 

Although employees might think these 
actions are harmless, IT departments gener- 
ally put security policies in place for more 
reasons than simply ensuring productivity. 
For example, controls intended to filter out 
inappropriate activity, such as access to 
pornography, gambling, games, or social 
networking sites, are there to prevent 
employees from engaging not only in dis- 
ruptive activities during business hours but 
also in activities that are embarrassing or 
even illegal, says Peter Brown, partner and 
national leader of Baker Hostetler's technol- 
ogy law practice (www.bakerlaw.com). 

"[Another] problem occurs from signal 
overlap," Katz explains. "In a corporate 
environment, IT departments will spend 
quite a bit of time tuning the wireless net- 
work and, in many cases, spend thousands 
of dollars on a wireless survey to fine-tune 
the wireless network to maximize coverage 
and performance. Too much signal overlap, 
not enough, or the wrong wireless band sig- 
nals can create an unusable wireless net- 
work or spotty coverage areas." 

Sensible Security 

Although there might be rare exceptions, 
it's generally not a good idea to let 
employees set up their own wireless access 
points, says NCP's Hack, even if those 
devices can add to employees' productivi- 
ty. Instead, the task of building a universal 
and secure wireless network architecture 
should fall on the shoulders of the IT 
department, which can test the environ- 
ment to ensure that it meets corporate secu- 
rity and stability requirements. 

Along with that wireless architecture 
should come a well-defined policy that pro- 
vides concise guidelines for employees on 
the use of the devices. "A clear IT policy 
should be distributed to all employees," 



Katz says. "They should be 
required to sign the agreement, 
indicating they have read it and 
understand the policies. In a sit- 
uation where an access point is 
found, each company will have 
to decide what, if any, discipli- 
nary action should be taken 
against the employee. Our com- 
pany's position is that it's more 
important to explain to the em- 
ployee the potential conse- 
quences of placing an access 
point onto the network than to 
discipline them for the action." 

Whereas an outright ban on 
wireless access points might 
seem like the most logical plan 
of attack for protecting an 
enterprise network, it's impor- 
tant for managers to understand why 
employees are using personal wireless 
access points. David Schofield, director of 
wireless services for TAG (www.i-tag.net), 
says that mobile portability has become a 
way of life for employees, so when they 
enter the workforce, they prefer not to 
change the way they communicate. Genesis 
Integrators' Katz has found that the unau- 
thorized installation of most access points 
occurs because employees simply desire to 
be more productive. 

"Once the employee understands the 
problems this creates, this issue goes away 
and the employee becomes more of an 
advocate for network safety," Katz adds. 
"These situations also provide an opportu- 
nity for a company to consider deploying 
authorized wireless access points to aid in 
employee productivity." Q 

Top Tip: 

Define Exceptions 

Like other consumer devices, personal wire- 
less access points can easily slip beneath 
the enterprise radar, in turn compromising 
security controls put in place by IT staff. 
However, according to Howard Melamed, 
CEO of CellAntenna (www.cellantenna.com), 
in situations where the devices might be 
necessary or othen/vise useful, it's crucial 
that IT managers never allow the devices 
into their managed areas unless the following 
conditions are met: 

• The personal access point is approved and 
tested prior to its deployment. The testing 
process should include hacker defense. 

• The appliance can be integrated into the 
current management system. For exam- 
ple, some systems have proprietary soft- 
ware that manages access points along 
with routers and other devices. 

• The appliance is placed with respect to 
the firewall(s) in the same manner as any 
other appliance. 
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For more Upcoming IT Events, see page 3. 



Gartner IT Infrastructure, Operations 
& Management Summit 

June 14-16 
JW Marriott Grand Lake 
Orlando, Fla. 
www.gartner.com/technology/summits 
/na/it-operations/index.jsp 



AITP Southwest Missouri 
June 15 
Springfield, Mo. 
aitpspringfield.org 



Green Data Center Conference 
June 15-17 
San Diego Super Computer Center 
at University of California San Diego 

San Diego, Calif. 
www.greendatacenterconference.com 



ISSA 
St. Louis Chapter 
June 15 
St. Louis, Mo. 
stl.issa.org 



Oklahoma City 
AITP Chapter 
June 15 
Oklahoma City, Okla. 
www.aitp.org/organization/chapters 
/chapterhome.jsp?chapter=40 



AITP Atlanta 
June 17, 5:30 p.m. 
Crowne Plaza Atlanta Perimeter NW 
6345 Powers Ferry Road NW 
Atlanta, Ga. 
www.aitpatlanta.org 



AITP Omaha 

June 17 
Omaha, Neb. 
www.aitpomaha.com 



AITP Long Island 

June 18 
www.aitp-li.org 



ISSA 

Upstate South Carolina 
June 18 
NuVox 

301 N. Main St., Suite 5000 
Greensville, S.C. 
www.upstate-issa.org 

AFCOM Central Ohio 
June 19 
Columbus, Ohio 
www.afcomcentralohio.org 



AITP 

California Southland 
June 23 
www.aitpcalsouthland.org 



ISSA Baltimore 
June 23, 4:30 p.m. 
Sparta Inc. 
7110 Samuel Morse Drive, Suite 200 
Columbia, Md. 
www.issa-balt.org 



AFCOM 
Central Texas 

June 24 
Austin, Texas 
www.afcom.com/afcomnew 
/CentralTexas.HTML 



Integrate 2010: Uniting The World Of IT 
June 24-25 
Executive Caterers At Landerhaven 
61 1 1 Landerhaven Drive 
Mayfield Heights, Ohio 
gcle.itsmfusa.org/?q=content/integrate-2010 



ISSA 
Des Moines 
June 28 
3920 SW Camden Circle 

Ankeny, Iowa 
www.issa-desmoines.org 



AITP Akron 

June 29 
Akron, Ohio 
www.akron-aitp.org 



ISSA Inland Empire 
June 29, 11:30 a.m. 
Coco's Restaurant and Bakery 
60 West Foothill Blvd. 
Upland, Calif. 
ie.issa.org 
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Study 
Examines 
Social 
Networking 
Security 



Social networking is on tlie rise, but it's also 
introducing new ways for cybercriminals to 
attack. According to the Consumer Reports 
National Research Center, in the past two 
years, 40% of households were infected by a 
virus, and some Web-connected households 
have reported multiple attacks through virus- 
es, spam, spyware, and phishing. 

The Consumer Reports National Research 
Center also reported that Americans have 
spent an estimated $4.5 billion and have 
replaced 2.1 million computers in the past 
two years because of malware and related 
problems. The majority of problems likely 
stem from users overexposing their personal 
information and not taking advantage of pri- 
vacy controls. According to the survey, one 
in four households with a Facebook user 
reported they weren't using Facebook's pri- 
vacy settings or said they didn't know about 
them. Facebook has more than 400 million 
active users. 

According to Jeff Fox, technology editor at 
Consumer Reports, companies should be 
concerned about these statistics. "Many of 
their employees are doubtless posting a lot on 
Facebook and, as our survey shows, many 
may not be using sufficient privacy protec- 
tion," Fox says. 'That could lead to personal 
losses for their employees and possible dis- 
closure of important business information to 
competitors or criminals." 

Strong Corporate Policies 

Fox says companies have a better chance of 
protecting themselves through strong corpo- 
rate policies regarding social networks and 
online use. 

"Businesses should establish a social net- 
work use policy and make it clear that em- 
ployees are not to post business-related 
info on a social network without the knowl- 
edge and permission of their supervisor," 
Fox says. "If practical, the owners should 
themselves spot-check their employees' use 
of such services to ensure that employees 
are complying with the company policy. Pro- 
active businesses ought to educate their 
employees in the use of such services to 
minimize the risk of personal loss." 

Because many companies have a presence 
on social networking sites as part of a digital 
marketing plan. Fox suggests that organiza- 
tions treat social networking the same as any 
online service. He says to keep any official 
social network account used for digital mar- 
keting purposes under the strict control of 
someone within the company and to remem- 
ber that anything posted publicly online is 
available to everyone and can never be truly 
wiped away. 

by Tessa Warner Breneman 
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Headaches 
From USB Devices 

These Small, Handy Gadgets Can Cause Big Problems 



by Bruce Gain 

Now THAT USB PORTS are a standard fea- 
ture on PCs, it is possible to connect work- 
stations to a number of devices, from digital 
cameras to thumb drives to printers, without 
having to use proprietary cables or to install 
separate software for each device. But al- 
though USB devices have made life easier 
for consumers, they pose major headaches 
for IT departments given how easily USB 
connections can be used to transfer data 
inside as well as beyond the firewall. Given 
the concerns USB devices pose, it is crucial 
to put policies and best practices into place 
to help reduce the risks involved. 

Control What Comes In & Goes Out 

The scenario is all too common: Someone 
brings a USB key to work with a new mal- 
ware variation that is too new for the 
antivirus software to detect when the device 
is plugged into the worksta- 
tion, and the virus quickly 
spreads to other PCs connect- 
ed to the workstation on the 
network and eventually makes 
its way to the server room. "It 
is almost needless to mention 
the risk of an infected [USB] 
device that could bypass the 
perimeter protections and fire- 
walls and have easy access to 
infect local workgroups and 
servers," says Haim Stern- 
berg, president and owner of 
Cherry Systems (www. cherry 
systems.com). 

Although USB devices 
represent a major threat asso- 
ciated with malware coming 
into the network, it's also 
important to consider the 
risks they pose as a means 
for important data to leave 
the enterprise undetected. "It 
is relatively straightforward 
for an employee to download 
a large file from the office network to a 
connected storage device in a mobile 
phone or MP3 player or USB drive. That 
file may contain company confidential 
data or the client database," says Paul 
Wood, senior analyst for Symantec's 
MessageLabs Intelligence (www. message 
labs.com). "Many USB storage devices 
are not encrypted, so any confidential data 
that may be stored on a device — even if 
the company policy permits — may fall 
into the wrong hands and will be immedi- 
ately accessible to anyone else." 

One way to reduce the threat of malware 
and sensitive data leaving the network is 
through software solutions. To protect data 
for mobile use, only encryption-protected 
USB storage devices should be allowed to 
access PCs outside the firewall. For enter- 
prise workstations, it is possible to use 
software that disables the auto-run feature 
for USB memory sticks whenever they 
are plugged into a workstation port as 
part of an anti-malware solution, says 
Stefan Schiffert, CTO of Avira (www 
.avira.com). "[This way] malware can't 
spread via USB sticks," Schiffert says. 



"For many companies, this is a sufficient 
and easy-to-use solution." 

Through Windows management tools, it 
is also possible to block access to certain or 
all USB devices. "IT managers should make 
use of [Windows management] tools if they 
need fme-grained control over USB devices 
used in the company," Schiffert says. 

Specify Where Devices Can Be Used 

Inside the data center, USB keys can 
store essential utility and software files that 
can be plugged directly into servers for 
maintenance, diagnostics, or other tasks. 
Yet, according to Brad Kowal, assistant 
data center director for Shands HealthCare 
in Florida, precautions must be taken, such 
as designating server systems to which 
USB access is allowed. "Using USB keys 
for servers is the norm these days, as floppy 
disks and even CDs are going away. But 
for server support, keep the USB devices 



know, you are spreading a virus around on 
servers and workstations." 

Consider Banning USB Devices 

At the end of the day, it seems that 
many problems and security risks would 
be solved by locking down workstations, 
whether through BIOS controls, software, 
or both, so that no USB device can be con- 
nected to a user workstation. On a policy 
level, the use of USB devices could be 
banned completely; in today's world, 
however, such a draconian approach might 
not be feasible at most enterprises. "You 
could push group policy down all the way 
to the machines so that they will not 
recognize USB devices once plugged in, 



Key Points 




it is critical to ensure that USB devices do 
not serve as a conduit for malware to 
infect the enterprise's network or as a 
source for data leaks beyond the firewall. 

USB keys can serve as handy tools for 
server maintenance, but make sure they 
are used only for the data center servers 
and not for user workstations. 

Considering the risks portable USB 
devices pose to the enterprise, it may 
seem appropriate to prohibit their use 
completely, but taking such an absolute 
approach is impractical. 



Vr 



that you use on a one-on-one or a grouping 
with the servers in the data center and 
[make sure the USB devices] do not also 
get used on the desktop PCs in the organi- 
zation," Kowal says. "They really have to 
be managed in a central way and used just 
for the data center." 

Given the convenience, it is tempting for 
admins to use the same USB drives for 
servers and workstations, but the risks are 
obvious, Kowal says. "Let's say you are the 
server guy and you keep your set of apps on 
the USB key for [workstation] support, as 
well," Kowal says. "You then get a virus on 
it, you plug it in, and the next thing you 



but isn't that easier said than 
done?" Kowal says. "Doesn't 
the organization operate on 
USB keyboards, mice, and 
other devices?" 

Other less extreme mea- 
sures might be to only allow, 
as a matter of policy, a strict 
list of approved devices and 
usage terms. Wood says. "It 
may be appropriate to ban 
MP3 players or the connec- 
tion of noncorporate devices or mobile 
phones, but these should extend external- 
ly, too," Wood says. "If you are allowed 
only to connect a corporate phone or flash 
drive, then you should also not connect it 
to a noncorporate computer externally." 
(For more information on dealing with 
employee-owned devices, turn to "Trou- 
bles With Employee-Owned Devices" on 
page 12.) 

However, policy that allows for the use 
of only certain kinds of device types can be 
a challenge to manage. "Having strict poli- 
cies may be one thing, but monitoring them 
may be much harder," Wood says. 



Top Tip: Employ Centralized IVIanagement 

Besides focusing on USB devices as a standalone challenge, adequately integrating their usage 
policies into an overall security strategy is crucial, says Paul Wood, senior analyst for Symantec's 
MessageLabs Intelligence (www.messagelabs.com). "It is important to be able to minimize the risks 
an organization faces by reducing the threats that its users may be exposed to, whether by email, the 
Web, instant messaging, insecure networks, or unprotected USB storage devices," Wood says. "With 
centralized management, the administrators should be able to identify any potential breaches imme- 
diately, wherever the user is located, and not have to wait until they reconnect to the office network." 
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ENCLOSURES & RACKS 

Hergo is a U.S. designer and manufacturer of i 
^ Technical Workspace Solutions. 



■ Command Centers 


■ Relay Racks 


■ Control Stations 


■ Flat Panel Monitor Arms 


■ PACS- Mobile Carts 


■ Motorized Workstations 





ergO' 888.222.7270 www.hergo.com 



GSA Contract # - GS-29F-01 33G 

56-01 55th Avenue, Maspeth, New York 11378 



How Do You Measure the Energy I 
Efficiency of Your Data Center? I 



THIS IDEA WAS SO COOL, 

wEjyiADE itBJGGER! 




WEB BASED SPM INTERFACE 



BIVIS 



DATABASE > 



SENTRY POWER 
MANAGER APPLIANCE 



Sentry Power Manager 

> Enterprise Cabinet Power Mngt. 

> Reports & Trends 

> Device Monitoring 
' > Groups & Clusters 

> Kilowatt Readings for Billing 

> Auto-Discovery of Sentry CDUs 

> Alarms 




PRIMARY ETHERNET PIPELINE 



WEB BASED CDU INTERFACE 



K 





Sentry: POPS Switched CDU 

With Device Monitoring 

> Rack Level Power Management 

> Outlet Power Monitoring (POPS) 

> Input Power Monitoring 

> Environmental Monitoring 

> Outlet Groups 

> Alarms 



ith Sentry Power Manager™ (SPM) 
entrv POPS™ (Per Outlet Power Sensi 



CDU'sa 



Solutions for the Data Center 
Equipment Cabinet 



Server Technology 

tf 1.800.835.1515 www.servertech.cotTi 
tel 1.775.284.2000 sales(a)servertech.com 



•Twice the cooling capacity ^ • High sensible cooling - 

of the CMI 2-25,000 BTU/h ideal for server rooms 

• Energy efficient - 14 SEER, 
R410A refrigerant, and RoHS compliant 

• Mo floor space needed 

• Quick and easy installation 

The Ceiling Mount Series is backed by one of the best warranties in the business. 



• Includes state-of-the-art 
wall mount controller 

• Compact, self-contained, 
and only 20" tall 



To learn more, visit movincool.com or call 800-264-9573 

AACVINCOOL 

THE #1 SPOT COOLING SOLUTION 

© 2010 DENSO Sales Collfoinio, Inc. MovfnCool, SpolCool and Office Pro are 
registered trademarks of DENSO Corporolion. 
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I IBM & Indiana Sue One Another 

In the wake of Indiana's cancellation of its 10- 
year contract with IBM to work on the state's 
welfare system, both parties are suing one 




another. Indiana is seeking $1.3 billion from 
IBM for breach of contract and other actions, 
while IBM countersued for $52.8 million in 
equipment and payments. Indiana cited situa- 
tions where it alleged that IBM's actions hurt 
specific individuals. The state also claims to 
have paid IBM $2.64 million in disengage- 
ment costs already and will continue to do so 
through the month of June. 



I CA Changes Name 



CA will change its name to CA Technol- 
ogies, the company says. The name change 
is a result of comments from customers, 
partners, and market thought leaders, the 
company said in a statement. "The name 
CA Technologies acknowledges both our 
past and points to our future as a leader in 
delivering the solutions that will revolution- 
ize the way IT powers business agility," 
says CEO Bill McCracken. "We are exe- 
cuting on a bold strategy to delight our 
customers with unprecedented levels of IT 
speed and flexibility." The firm's Web site 
will also be revamped. 

I PMC-Sierra To Buy 

Adaptec Channel Storage Business 

PMC-Sierra is establishing a beachhead in 
the channel for x86 SAS RAID storage. The 
semiconductor and software provider has 
signed a definitive agreement with Adaptec to 
buy the latter's channel storage business for 
$34 million in cash. The deal, which should 
be concluded by the middle of this month, 
includes about 90 Adaptec employees in 
California and six other locations. Jared 
Peters, Adaptec's vice president of sales and 
marketing, will helm what will be a standalone 
business unit under the PMC-Sierra name. 
Peters says Adaptec's product plans will not 
change in the near term, although later items 
on its roadmap will incorporate 6 and 12Gbps 
PMC-Sierra chips. 
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Google 
To Buy Internet 
Telephony Company 

Google is planning to acquire Global IP Solu- 
tions, or GIPS, an Internet telephony and 
videoconferencing company. According to 
GIPS, Google has offered to pay $68.2 million 
for the takeover. Google says the purchase of 
GIPS will improve Google's online sen/ices 
and competition against other telecommunica- 
tions services from vendors such as Skype. 
Google has purchased three other video and 
VoIP companies, including GizmoS and On2. 
GIPS' largest shareholders have already stat- 
ed their commitment to the offer based on a 
recommendation from GIPS' board. 



Troubles With 
Employee-Owned Devices 

Keep Employee Devices From Creating Headaches For IT 
By Taking Control Of Their Use 



by Elizabeth Millard 

Smartphones, cell phones, notebooks, and 
other devices change so often that they can 
create major challenges for IT departments. 
Want to take control? Here are some tips for 
addressing the challenges. 

Make Security The Top Issue 

The biggest danger with employees using 
their personal devices in the workplace is 
that it introduces a major security hole. 
Without appropriate safeguards such as a 
VPN, a firewall, and antivirus measures, 
there's a good chance that any device could 
infect the network with the latest bug. 

"Security is never something that should 
simply fall on the shoulders of the IT 
group," says David Lingenfelter, informa- 
tion security officer at Fiberlink (www 
.fiberlink.com), a company that helps orga- 
nizations manage employee 
mobile devices. 

Security education goes a 
long way toward ensuring that 
everyone in the company 
knows the security policies, the 
acceptable use policies, and 
what's expected of employees. 
"Whether it be notifying IT 
when they see something out 
of place or accepting that IT 
will want to monitor and have 
some level of control over their 
personal equipment when they 
want to use it as part of their 
day-to-day function, everyone 
in the company has to accept 
some responsibility when it 
comes to security," Lingen- 
felter says. 

Focus On Standardization 

Although employees will 
have a range of devices, a com- 
pany can establish a corporate 
standard that allows for contin- 
uous testing and for creation of an infra- 
structure that supports that, notes Martin 
Hack, executive vice president of NCP 
Engineering (www.ncp-e.com). 

"One challenge is compatibility with 
existing infrastructure," he says. "Not every 
smartphone is able to connect securely to 
the corporate infrastructure to read email or 
access internal applications. This usually 
leads to employees asking IT to support and 
configure their particular device, which 
introduces [an influx] of support and securi- 
ty issues due to lack of standardization." 

Compatibility issues crop up because 
consumers tend to get the latest technology 
as soon as it hits the market, Lingenfelter 
adds: "The enterprise moves at a certain 
speed, and consumer products typically 
move a bit faster when it comes to adopting 
new technologies." He notes that one exam- 
ple that cropped up a few years ago was 
with different versions of Microsoft Office. 
With Office 2007, the software maker 
changed the naming convention of docu- 
ments and spreadsheets, so people who got 
laptops with the software suite preinstalled 
would often send documents that other 



people with an older Office version couldn't 
read until IT installed a compatibility pack 
on everyone's PCs. 

To create better standardization, IT man- 
agers need to understand how employees 
use their personal devices, says Lingen- 
felter. That means talking to different 
departments to get a grasp of how a sales- 
person, for example, works in the field with 
email and access to CRM applications. 
From there, IT can create a Ust of devices 
that are compatible with existing resources. 

Enforce The Policies 

Having a policy that's not enforced is the 
same as having no policy. Hack says. One 
major misstep that he sees is constant 
exceptions for employees, which effectively 
punches holes into the existing security 
framework to accommodate the require- 
ments for a given device. 



One part of a policy could be that per- 
sonal devices get reset to factory defaults 
when the employee leaves the company, 
for example. Enforcing such policies is 
crucial to creating an environment that 
boasts better security and gives employees 
limits and boundaries. 

Think About The Details 

Devices bring up a host of smaller issues 
beyond policy creation, and one to think 
about is software licensing. Tracking inven- 
tory of which licensed software is installed 
on different machines is difficult enough on 
machines owned by the company, but hav- 
ing to stay on top of it on machines not 
owned and centrally managed becomes 



Key Points 




• Make security the top issue when deal- 
ing with devices and creating policies 
about usage. 

• Create a company standard and, most 
importantly, enforce the standard with as 
few exceptions as possible. 

Think about software licensing issues and 
how they might affect IT operations. 



Lingenfelter notes that one pitfall he's 
seen often is when companies allow 
employees to connect any device to the net- 
work. "The IT manager has to retain some 
control over the environment, and that 
means they may need to limit the types of 
devices that can connect," he says. "Em- 
ployees need to be aware that even if the 
device is theirs, they're connecting to corpo- 
rate assets, and that means the IT team 
needs some level of control over how infor- 
mation is handled." 



even tougher, Lingenfelter says. 
Another issue can be mainte- 
nance; the IT staff may not be 
familiar with the technology that 
the employee owns, and when 
the employee installs a corporate 
application and runs into issues, 
it can be challenging to trou- 
bleshoot without understanding 
the system on which it's in- 
stalled. Standardization can help 
ease these issues by limiting the 
types and brands of devices al- 
lowed on the corporate network. 

One more detail for an IT 
manager to consider is personal 
calling plans. Lingenfelter notes that an IT 
manager can work with the finance depart- 
ment to determine if employees can expense 
their personal calling plan or if they'll need 
to join the corporate plan. The corporate op- 
tion often boasts significant savings but may 
be limited to only one or two providers. 

When it comes to employee-owned de- 
vices, headaches can abound. But by creat- 
ing solid policies that can be enforced and 
staying on top of the smaller details, an IT 
manager can take control. 



Top Tip: Use The Device To Centralize Control 

Some device features can be more helpful than headache-inducing for IT managers, notes David 
Lingenfelter, information security officer at Fiberlink (www.fiberlink.com). For example, some email 
sync options can let an employee connect to any phone to get email but also act as reporting tools, 
letting IT know exactly what type of phone is being used and what version of the software is on it. 
Similarly, using a device that reports into the corporate sen/er will help an IT manager know what 
phones are used, even if they aren't allowed by the company. 

Lingenfelter says, "These centralized controls can also have a benefit if the device gets lost [or] 
stolen or if the employee leaves the company, as the IT manager has the ability to send a com- 
mand to the phone and reset it to factory defaults, which removes all corporate information." 
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Going Green!!! 

Power Factor is Real 
and now it's Real-Time with the MRP Power Solution 



Reach operational efficiency and conform to new Green Energy 
standards witli tlie IVIRP outlet monitoring solutions. 

BayTech's metered outlet modules report Amps, Voltage, VA, 
Watts, power factor and efficiency per receptacle. 

Through our secure SNMP engine thresholds can be set to help 
identify equipment that is running inefficient. 



Standard Features 

• Single Phase and Three Phase 

• 20,30,50,60 Amp Support 

• On, Off, Reboot option 

• HTTPS, SSH, SSL Access 

• Radius, TACACS Authentication 

• Tool less Mounting 



Unique Features 

• Modular Design 

• All Receptacles Monitored 

• Power Factor per Outlet 

• kW Hour Meter per Outlet 

• Current, Voltage and VA and Watts 

• Reliable PCB Power Distribution 

• Fail Functional Design 



Metered Outlet - MRP 

Additional Unique Features 





ON 

20 


ui 


O 

OFF 




All Circuit Breakers Monitored 

Most metered power solutions only monitor Input power. BayTech 
monitors all circuit breakers and reports via SNMP when thresholds 
are met. 

Outlet Metering with Efficiency 

Monitor individual outlets and receive current, watts, and volt-amps. 
Continuously monitoring equipment for efficiency with power factor. 

Locking C13 Receptacle Optional 

Reliable integrated locking clips assure power cord retention. Unique 
to the industry and does away with nuisance wire clips. 

Reliable ROB Rower Distribution 

ISO's (Insulation Displacement) connectors are faulty and unreliable! 
All BayTech power solutions use reliable PCB power distribution. 

Integrated Sensor Inputs 

Eliminate the need for extra environmental monitoring devices. All 
BayTech power solutions offer two ports for external temperature and 
humidity probes. 



Bay Technical Assoc. Inc. 5239 A Avenue Long Beach, MS 39560 Tel: 228-563-7334 Fax: 228-563-7335 sales@baytech.net 



Processor Showcase 

The Processor Showcase provides a 
quick glimpse of data center products 
available from some of the industry's 
leading manufacturers. Each Showcase 
provides information on the product's 
most important features, complete with 
a product photo, to simplify your 
buying process. 



Product manufacturers and resellers: 

To list your products, call (800) 247-4880. 



Physical Infrastructure 



Snake Tray® Cable Management 
& Power Distribution 

Designed To Reduce Construction Costs! 



Cable Management 

Built-in mounting hardware 
Integrates with access 
floor or mounts directly to 
the subfloor 

Power Distribution 

Modular energy-efficient 
bus bar technology 
Power and data 
distribution boxes 



Snake Tray 

(800) 308-6788 
www.snaketray.com 





Physical Infrastructure 



USB Interface 



$1 



Rugged Plastic Enclosure 



High Accuracy DigitaJ 
Temperature Sensor 




29.99 

Free 
Shipping 



TEIVIPERATURE@LERT 

' Notifies You Via Email Of Changes In Room Temperature 

' Runs On All Windows Platforms 

' Logs To TXT, Temperature Graph, Event Log, and XIVIL 

' Runs As A Windows Service 

' SNMP Support 

' Free Shipping 



TEMPERATURE@LERT' 

USB TEMPERATURE MONITOR WITH EMAIL ALERTS 

Temperature@lert 

(866) 524-3540 
www.temperaturealert.com 



Physical Infrastructure 




CS-2HD2/HDE Smart Power Monitor 

Easily add input current load and power monitoring to any 
existing cabinet 

Quickly added to SAN's or other cabinets that do not have 
any power monitoring capabilities 
Measure aggregate current draw on each power circuit 
IP access and security/Environmental monitoring 
Provides automated SNMP-based alarms or email alerts 



Server Technology 



Server Technology Inc. 

(800) 835-1515 
www.servertech.com 



Physical Infrastructure 



CW-24V5 Sentry Switched CDU 

Mixed Outlet 3-Phase 
415V/240V 

• Achieve greater efficiencies 
by bringing 3-Phase 415V to 
the cabinet and 240V to the 
devices 

• Single-power input feed; 24 
outlets per enclosure 

• Delivers up to 21. 6kW 

• Remote power management 

• IP access and security 

• SNMP traps and email alerts 

• Environmental monitoring 

• Ability to add an expansion 
module 






1 







Server Technolosy 



Server Technology Inc. 

(800) 835-1515 
www.servertech.com/products 



Physical Infrastructure 



CS-3AVY Sentry Smart CDU 




Server Technolosy^ Iri^- 



Provides reliable 3-Phase 
power distribution. Multiple out- 
let types distribute multiple volt- 
ages via 3-Phase 208V Wye 
power in-feed. 

• High Density 

• Multiple Voltage Outputs 

• Input Current Monitor 

• IP Access & Security 

• SNMP Traps 

• Environmental (Temperature 
& Humidity) Monitoring 

• Branch Circuit Protection 

• NEW! Linking for Smart 
CDU (Expansion Modules) 



Server Technology Inc. 

(800) 835-1515 
www.servertech.com 
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PRODUCT SPOTLIGHT 



ortable Cooling 



Black Box 24 Or 42U ClimateCab Black Box ClimateCab NEMA 12 



NEMA 12 Server Cabinet 




Black Box ClimateCab Server Cabinets can accommo- 
date systems that reside in areas without adequate 
climate controls, letting users avoid making costly infra- 
structure changes. These enclosures are NEMA 12 rated 
for use in indoor locations with falling dirt; circulating 
dust, lint, and debris; and dripping or splashing liquids. 

• Save energy by cooling just the cabinet, not the 
entire room 

• Includes a 6,000 BTU (24U) or 8,500 BTU (42U) 
air-conditioning unit 

• NEIVIA 12 rated 

• 40-inch depth accommodates most servers 

Best For: Server installations outside the protection 
of a climate-controlled data center. 

Price: $4,249.95 (24U); $5,499.95 (42U) 



(724) 746-5500 
www.blackbox.com 



Wallmount Cabinet 




Secure wallmount ClimateCab cabinets provide a com- 
pact way to protect and cool sensitive components. Users 
can install the NEIVIA 12-rated wallmount cabinets in 
indoor environments where falling dirt; circulating dust, 
lint, and debris; and dripping or splashing liquids would 
othen/vise cause problems for equipment. 

• Compact wallmount design saves space 

• Operates on a standard 1 1 5V power source 

• Single-hinged or double-hinged 

• Choose from a cabinet with a fan or an 800 BTU 
air-conditioning unit 

Best For: Remote sites that have limited space and con- 
ditions that could be damaging to delicate electronics. 

Price: $999.95 to $2,795.95 



(724) 746-5500 
www.blackbox.com 



KwiKool KPO 12-23 
& 12-43 12-Ton 











■ 


sHiiiiiii- ^ 

1 


* w 


lilt*' 


# 








The new KwiKool KPO portable air conditioners deliver a 
powerful 12 tons (139,400 BTU/hr) of cooling capacity in 
a compact size. The unit measures only 62 x 32 x 64 
inches (HxWxD) — about the size of a typical 5-ton unit — 
and it's small enough to fit through a standard door. 

• Condenser and cold supply and return air can be 
ducted up to 60 feet using high-static blowers 

• Internal circuit breaker allows easy hookup to 
208/230-volt three-phase (1 2-23) or 460-volt three- 
phase (12-43) models 

• Integrated phase and power monitor provides protec- 
tion from electrical power quality issues 

• Low ambient temperature controls with a condenser 
operating range of 30 to 100 degrees Fahrenheit 

Best For: Large computer rooms or emergency cooling 
during outages. 

Price: Rentals from $450 per day or $1 ,325 per week 



(800) 972-6600 
www.atlassales.com 



KwiKool SAC 1411 




As one of KwlKool's Strategic Air Center series of 
portable spot coolers, the SAC 141 1 features micro- 
processor digital controls and an Easy-Touch control 
panel. The unit is an air-cooled, 1 .15-ton portable spot 
cooler that operates on a 1 1 5V/1 5A circuit. The SAC 
141 1 also supports 460CFM evaporator airflow and 
1 ,200CFM condenser airflow. 

• Provides 13,850 BTU/hr of cool air 

• Operates on a standard 1 15V power source 

• Operating range between 60 and 1 1 F 

• Easy-access hinged panel with Kwikloks 

Best For: Computer rooms, server closets, or ware- 
house use. 

Price: $3,495 



MaxPowerCoolCubelO 




The CoolCube 10 is a unique modular air-conditioning 
system that users can install standalone or stacked in 
a 19-inch server rack, above a drop ceiling, or as a 
portable spot cooler. Features include a programmable 
control panel, electronic thermostat control, and a 2.5- 
gallon condensate collection tank. 

• Can be stacked up to three modules high 

• Provides 10,000 BTU/hr of cool air at 95 F at 
60% RH 

• Stackable for redundancy or added capacity 

• Operates on a standard 1 15V power source 

Best For: Computer rooms, sen/er closets, and IT facili- 
ties with limited floor space. 

Price: $2,600 



MovinCoolCM12 




The MovinCool CM12 is a ceiling-mounted air conditioner 
that is just 15.5 inches tall, making it ideal for spot cooling 
space-limited installations and server rooms. The CM 12 
frees up valuable floor space and features built-in flanges 
and mounting brackets, letting users install it quickly and 
with minimal effort. The CM12 is a cost-effective spot- 
cooling alternative to central air conditioning. 

• Provides 10,500 BTU/hr of cool air at 80 F at 50% RH 

• Provides 1 3,000 BTU/hr of cool air at 95 F at 60% RH 

• Operates on a standard 1 15V power source 

• Fits into tight ceiling spaces, freeing up floor space 

Best For: Space-limited equipment rooms and cramped 
sen/er and telecom closets. 

Price: $2,895 



Contact 



(800) 972-6600 
www.atlassales.com 



(800) 367-8675 
www.spot-coolers.com 



(800) 264-9573 

www.movincool.com/dealer.php 
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Processots Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 

Compiled by Andrew Liebman 



MovinCool CM25 




The new MovinCool CIVI25 is a ceiling-mounted air con- 
ditioner that is 20 inches tall and compact enough to fit 
above a drop ceiling to spot-cool compact server rooms 
that need robust heat evacuation. The Cl\/I25 features a 
wall-mounted electronic controller that lets users monitor 
and troubleshoot problems. The unit also features built-in 
flanges and mounting brackets for easy installation. 

• Provides 25,000 BTU/hr of cool air at 80 F at 50% RH 

• Provides 1 8,000 BTU/hr of cool air at 95 F at 50% RH 

• Operates on a 208/230V power source 

• Wall-mounted controller with LCD 

Best For: Server rooms and other spaces with high 
heat loads. 

Price: $6,995 



MovinCool Office Pro 12 




The MovinCool Office Pro 12 Is a portable spot-cooling 
air conditioner designed to lower operating temperatures 
of computers and networking, communications, and 
office equipment to maximize reliability and hardware 
lifespan. The Office Pro 12 is self-contained and portable 
and features an electronic thermostat and a programma- 
ble control panel for tailored cooling when and where 
you need it most. 

• Provides 12,000 BTU/hr of cool air for maximum 
spot cooling 

• Programmable digital controller 

• Operates on a standard 1 1 5V power source 

• No costly installation necessary 

• Maintains ideal operating temperature for heat- 
sensitive electronics, down to 65 F 

Best For: Offices filled with heat-generating electronics. 



MovinCool Office Pro 18 




The MovinCool Office Pro 18 offers superior cooling 
capacity without requiring a nonstandard power source. 
This portable air conditioner protects sensitive data and 
electronics systems from loss and failure, acting as an 
insurance policy for your infrastructure. The Office Pro 
18 features an intuitive control panel that lets users des- 
ignate when the unit operates. 

• Provides 1 6,800 BTU/hr of cool air for maximum 
spot cooling 

• Operates on a standard 1 1 5V power source 

• Programmable controls enable weekend and after- 
hours cooling 

• No costly installation necessary 

• UL Listed for safe operation 

Best For: Heat-sensitive office and data systems. 







Price: $4,065 




Price: $3,655 




(800) 264-9573 


(800) 264-9573 


(800) 264-9573 


www.movincool.com/dealer.php 


www.movincool.com/dealer.php 


www.movincool.com/dealer.php 



MovinCool Office Pro 36 




The MovinCool Office Pro 36 delivers 36,000 BTU/hr 
of spot cooling for sensitive equipment. The Office Pro 
36 features an intuitive control panel that lets users 
program the unit to operate after hours or on the 
weekend. The portable self-contained air conditioner 
requires no costly installation. 

• Provides 36,000 ETL-verified BTU/hr of cool air 
for maximum spot cooling 

• Operates on a 208/230V power source 

• Features an AFCI plug for added safety against 
electrical arcing 

• Supports plug-and-play condensate pump 

• Easy-to-use programmable controls 

• Self-contained, portable, and easy to set up 
and operate 



MovinCool Office Pro 60 




The MovinCool Office Pro 60 delivers up to 60,000 
BTU/hr of cooling capacity, making it almost twice as 
powerful as MovinCool's Office Pro 18. This portable air 
conditioner is designed to manage temperatures for 
computer networks, communications equipment, and 
office electronics. The self-contained Office Pro 60 is 
easy to install — just position the wheeled unit, plug it in, 
and turn it on. 

• Programmable digital controller enables weekend and 
after-hours cooling 

• Operates on a 220V power source 

• Provides cooling to temperatures in the low 60s to 
maximize the life span of heat-sensitive electronics 

• Condensation pump included for uninterrupted operation 

• UL Listed for safe operation 



MovinCool Office Pro 63 




Like its sibling the Office Pro 60, the MovinCool Office 
Pro 63 delivers up to 60,000 BTU/hr of cooling capacity 
and is ideally suited for the demands of large office 
spaces and heat-sensitive electronics installations. This 
portable air conditioner is self-contained and operates on 
460V power for as little as 15 cents per hour. 

• Programmable digital controller enables weekend and 
after-hours cooling 

• Provides cooling to temperatures in the low 60s to 
maximize the life span of heat-sensitive electronics 

• Condensation pump included for uninterrupted operation 

• UL Listed for safe operation 

Best For: Large office spaces and computer rooms filled 
with heat-sensitive electronics. 



Best For: Servers, routers, telecommunications, and 
other heat-sensitive equipment. 

Price: $6,995 



(800) 264-9573 

www.movincool.com/dealer.php 



Best For: Large office spaces and computer rooms filled 
with heat-sensitive electronics. 

Price: $11,145 



Price: $12,495 



(800) 264-9573 

www.movincool.com/dealer.php 



(800) 264-9573 

www.movincool.com/dealer.php 
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Survey Highlights 
Access Governance 
Concerns 

Cloud computing is undeniably on the rise, and 
witti it comes a great wave of IT innovation. 
But as with the development and enthusiastic 
adoption of any technology, best practices, 
individual expertise, and common sense often 
must play catch-up with rapid growth, creating 
or exposing problems in the process. Cloud 
computing is certainly no exception. 

According to a recent "2010 Access Govern- 
ance Trends Survey" sponsored by Aveksa and 
conducted by the Ponemon Institute, enterpris- 
es are not doing a good job of keeping pace 
with the changes wrought by cloud computing. 




Specifically, the study found that of those 
surveyed, 87% felt that individuals had too 
much access to IT resources that did not 
pertain to their positions; 72% of respondents 
did not feel that they were able to quickly 
respond to employee access requirement 
changes; about three-fifths admitted that use 
access policies were not routinely reviewed 
or enforced; about 65% lack sufficient staff to 
ensure proper governance; and 73% felt that 
cloud computing made it easier for individuals 
to skirt policies that they did have in place. 

The Trouble With Cloud Computing 

According to IVIike Spinney, senior privacy 
analyst with the Ponemon Institute, a core part 
of the problem is a company's loss of control 
over its data, as workers may use a cloud ser- 
vice and upload information to it without autho- 
rization. "Rogue adoption of cloud applications 
may be a violation of policy on its own and, 
depending on the application, result in the 
upload of potentially sensitive information to a 
platform outside of an organization's control," 
he explains. 

This problem is nothing new or unique to cloud 
computing. Spinney says. "Individual users — 
early adopters — recognize an advantage to a 
certain innovation and they rush ahead to 
exploit that advantage, often without consider- 
ing the implications to information security," he 
says. Whether that's an individual using a ser- 
vice for just a few documents or an entire 
department employing a larger-scale cloud 
service without the IT department's involve- 
ment, information resources are decentralized 
in a potentially dangerous way. 

Spinney also believes that strong leadership, 
company-wide coordination of data resources, 
good training, and consistent policy enforce- 
ment in the form of a CSO or CISO that also 
upholds a company's goals is a necessary 
component to reining in rogue cloud adop- 
tion. "Organizations need to evaluate which 
products and platforms can best help them 
achieve their IT security goals [while] recog- 
nizing that technology alone cannot solve the 
problem," he says. 

by Seth Colaner 
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Virtualization's 
Vexing Side 

How Power & Cooling Problems Can Be An Unexpected Guest 



by Christian Perry 

In an ironic twist of IT fate, data cen- 
ters often discover that their efforts to solve 
power and cooling problems through virtu- 
alization can actually create more prob- 
lems. Without question, virtualization can 
improve the overall bottom line on the 
power bill through the consolidation of 
servers, but that very consolidation can in 
turn boost power and cooling requirements 
in smaller spaces. Data center managers 
who approach virtualization without this 
knowledge may find themselves scram- 
bling for solutions. 

"Virtualized servers accommodate mul- 
tiple applications simultaneously, which 
increases power density and ultimately 
generates more heat within the physical 
space. In many instances, servers are oper- 
ating below full capacity, which makes 
virtualization a good idea. However, it is 
important to compare hardware capabili- 
ties with virtual applications, as the addi- 
tional power consumption could exceed 
the server's available power capacity. To 
overcome this issue, data center managers 
should ensure their infrastructure can sup- 
port the virtualized server's power needs," 
explains Matt Kightlinger, director of 
solutions marketing for Emerson Network 
Power's Liebert Products business (www 
.liebert.com). 

Virtual Headache 

Virtualization has a well-deserved place 
in most data centers, thanks to the technolo- 
gy' s ability to make the most of servers and 
cut back on floor space requirements. 
However, those benefits can come with an 
unanticipated price, because the total power 
per square foot can increase even as the 
total power per unit of work decreases, says 
Andrew Hillier, co-founder and CTO of 
CiRBA (www.cirba.com). 

"A new-generation server may be able 
to do twice as much work per watt con- 
sumed, but that doesn't always mean they 
use half the power. A modern server run- 
ning at a high level of utilization will often 
use more power than an older-generation 
server running at a low utilization level," 
Hillier adds. 

A data center using racks that draw a 
typical 2kW can discover that a virtual- 
ized rack needs to draw 12kW, says Nick 
Razey, CEO of Next Generation Data 
(www.nextgenerationdata.co.uk). How- 
ever, if the data center sticks with 2kW 
racks, it would require six rack foot- 
prints — at six times the cost of just one 
rack. This can easily offset the cost- 
saving benefits initially intended by a 
virtualization deployment, as well as 
increase power and cooling needs. 

Unless your data center is a brand-new 
state-of-the-art space, it likely wasn't 
built with virtualization in mind. This can 
be problematic when virtualization does 
make an appearance, because introducing 
concentrated heat loads into a data center 
that has traditional power distribution and 



Key Points 



Despite virtualization's claim of decreasing 
power bills and saving space, the technol- 
ogy can increase power and cooling needs 
through increased server utilization. 

The concentrated heat loads spawned 
by virtualization are generally not solved 
with traditional power and cooling systems 
that are designed for a more uniform load 
across the data center. 

Monitoring, redundancy, and modeling can 
help to guard your data center against 
potential heating and cooling problems 
caused by a new virtualization deployment. 



a traditional cooling system disregards the 
assumptions of relatively uniform load 
densities across the data center floor, says 
Jim Ludlam, data center and operations 
director at 3t Systems (www.3tsystems 
.com). A traditional cooling system 
attempts to overcome these concentrated 
heat loads by dumping greater volumes of 
colder air into the room, which increases 



performance from a single virtual ma- 
chine to all the hosted servers, says Javier 
Rivera, director of IT infrastructure at 
Softtek (www.softtek.com). 

"By monitoring, we are able to make 
key decisions, such as resource optimiza- 
tion, load balance between host servers, 
etc. One of the capabilities that virtualiza- 
tion software offers is the migration of vir- 
tual machines from one host server to 
another, giving you the ability to balance 
and distribute resources of the host 
servers," Rivera says. 

Rivera also points to the importance of 
support and warranties for hardware run- 
ning virtualization technology, along with 
plans that handle parts replacement to 
ensure that service is restored as soon as a 
part is replaced. 

Liebert' s Kightlinger also recommends 
using modeling methods such as compu- 
tational fluid dynamics to estimate how 
the changing IT environment will impact 
the temperature profile — which in turn 
lets data centers adjust infrastructure 
accordingly to support virtualization. 
Beyond modeling, Kightlinger also ad- 
vises monitoring for hot spots, which 



Obtaining the full range of benefits 
from virtualization is difficult when 
precautions aren't in place to ensure the 
hardware running the technology 
remains up and running as it should. 



the frequency of air changes and reduces 
the likelihood of hot spots. 

"If you add loads, relocate equipment, 
add cooling, etc., you change variables 
and may just move your problems to new 
locations in the data center," Ludlam 
says. "At the root of this is the fact that 
traditional data centers are not flexible 
and subject to too many variables. 
Without addressing this, facilities will 
always be subject to redesign, renova- 
tion, or rebuilding as business require- 
ments change. Business owners do not 
like to hear that the strategic project they 
just approved did not account for the 
necessary power and cooling upgrades in 
the project ROI — or worse, that the pro- 
ject cannot be taken live until the un- 
planned expenditures for power and 
cooling are made." 

Come Prepared 

Obtaining the full range of benefits 
from virtualization is difficult when pre- 
cautions aren't in place to ensure the 
hardware running the technology re- 
mains up and running as it should. Mon- 
itoring workloads is particularly crucial, 
because a server's saturation can decrease 



could be as simple as walking through 
the data center and feeling for hot spots 
or as complex as conducting regular data 
center assessments. 



Watch For 
Warning Signs 

Whether a physical server is damaged due to 
hardware issues, natural wear and tear, or 
excess heat caused by poor cooling systems, 
the repercussions can be exponential if that 
sen/er also holds virtual servers. Miguel 
Gallegos, sen/ice leader of the Center of 
Excellence of Virtualization at Softtek (www 
.softtek.com), identifies several warning signs 
that can point to potential problems with virtu- 
alization hardware. 

• Decreased or slow application 
performance 

• Disconnections 

• Operating system errors 

• Errors that appear in monitoring logs 

• Detonated alarms from monitoring tools 
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GetW.I.R.E.D 

Use Shields Environmental 

To Procure & Repair Your Equipment 



by Nathan Lake 
• • • 

W.I.R.E.D (Warranty, Inventory Manage- 
ment, Repair, Exchange, and Disposition) is 
a new program from Shields Environmental 
that's designed to be a more economical and 
effective way to procure and repair old 
equipment than locked-in repair contracts. 
As a trusted vendor, Shields can test your 
equipment and provide you return parts that 
feature solid warranties. 

Energy Conservation 

If you're concerned about the environ- 
ment and sustainability, you'll be happy to 
know that Shields developed an EMS 
(Environmental Management System) 
that's certified to ISO 14001, which is the 
global standard for operating in an envi- 
ronmentally sustainable manner. With 
proper equipment disposal, your organiza- 
tion can add to its corporate responsibil- 
ity programs and improve brand image. 

Shields Environmental 
W.I.R.E.D 



(877)321-4447 
www.shields-e.us 

A single program combining warranty, inventory man- 
agement/asset recovery, testing/repair, exchange, 
and disposition sen/ices. 



W.I.R.E.D can also help to assess the envi- 
ronmental performance of key suppliers to 
help all clients and business partners 
achieve higher environmental standards. 

As an added bonus, you can take advan- 
tage of Shields Energy Conservation 
Solutions to reduce your organization's 
energy costs and carbon footprint. To 




WIReD 

P R O G R A M 

begin, you can take Shields' comprehensive 
energy survey to discover your company's 
current energy consumption. Shields will 
highlight the areas where you can immedi- 
ately make cost and efficiency improve- 
ments. Most organizations see a return on 
investment within 15 to 24 months and 
realize energy savings of up to 40%. 

Resolve Excess Inventory 

Shields Environmental has been manag- 
ing asset disposals for the telecom industry 
since 1979, and with its extensive customer 
base, you can take your obsolete equip- 
ment and turn it into a revenue stream. 
Both brand protection and risk manage- 
ment are key elements of the W.I.R.E.D 



service, and Shields ensures compliance 
with both existing and forthcoming envi- 
ronmental legislation. For instance. Shields 
delivers full reports that cover the move- 
ment of the equipment, how much you 
stand to financially gain, and information 
about managing the enviroimiental risk. 

Exchange 

It's typically more economical to replace 
and recycle bad equipment than it is to 
repair the broken components. To help you 
make the most economical decision, the 
W.I.R.E.D program provides you with 
real-time values, such as timeframe, cost of 
shipping, and exchange price. When you 
exchange parts with Shields, you'll gener- 
ally receive your exchange equipment 
within 48 hours of the receipt of order. By 
spending less time on obtaining repair ser- 
vices, your data center can return to work- 
ing at full capacity as soon as possible. 

Shields also offers a warranty exchange 
service, where it will obtain the warranty 
equipment on your behalf to reduce admin- 
istrative time working with the original 
suppliers. This gives you a single contact 
for all warranty returns, which is especially 
helpful in a data center where you have a 
variety of vendors to deal with. Any units 
will be tested prior to returns to avoid cost- 
ly NTF (no trouble found) charges. 

Repair Services 

If you do decide on repair. Shields will 
send the electronics to a state-of-the-art lab 
in Sanford, Fla.; another lab in Concord, 
N.H., is currently in prep stages. The lab 
functions as both an in-house testing facility 
for products being shipped to customers and 
as a way for customers to test circuit cards. 



frames, and new software prior to integration 
onto their network. If you opt to send in 
large pallets of equipment for repair. Shields 
will produce a detailed report for the most 
economical solution (either repair or ex- 
change) based on the current value of each 
component, per individual serial number. 



How W.I.R.E.D Works 

With tine W.I.R.E.D program, Stiields gives 
you online access to monitor the status, loca- 
tion, and asset recovery stage of your equip- 
ment. You can request quotes or recall the 
units and generate purchase orders through 
the W.I.R.E.D software. Here's a quick break- 
down of what W.I.R.E.D can do for you: 

1. Submitted equipment is scanned into 
Shields Environmental databases with 
CLEI Code, OEMPN, PID (if applicable), 
and OEIVI serial number. 

2. If covered under a valid warranty, Shields 
will contact the vendor and return a 
known good unit to the end user. 

3. Equipment no longer wanted by the end 
user, based on buying history, is trans- 
ferred to Asset Recovery and sold. You 
receive a pre-negotiated revenue share 
at the end of each month. 

4. If a repair or exchange is necessary, the 
W.I.R.E.D system will tell you which 
option is the most economical for the 
return of your equipment. 

5. At the end of the year, you'll be provided 
with environmental reports to indicate 
how your organization has reduced its 
carbon footprint and utilized safe recy- 
cling methods. 
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AlphaServer GS160 Model 16 

Base System for OpenVMS 

• DY-160CG-AA 

• One Alpha 21264 Processor 1224 MHz 

• Four Quad Building Blocks 

• One 14-SlotPCI Shelf 

• OpenVMS Operating System License 

ALSO AVAILABLE: 

• Additional 1224 MHz CPU w/SMP 

• Additional Memory 

• Additional PCI Shelves 

• Additional PCI Options 



2 Systems In Stock! 



Authorized COMPAQ' Reseller 

WE WILL BUY YOUR USED HARDWARE! 





Thanks to DMD, we 
don't have to sit on 
our old computer 
equipment anymore. 



retrieve ■ refurbish - reuse ■ recycle ■ remarket 
We Purchase: We Offer: 



Computers/Laptops 
Networking Equipment 
Power/Environmental 
Telecommunications 
Complete Data Centers 
Printers 



Asset Tracking/Reporting 
Deinstallation/Packing/Transportation 
DOD Level Data Destruction 
Epa Recycling/Reuse 
Ongoing Support Plans 
Technology Refresh/Install Programs 



At DMD Systems Recovery, we remove the headache from asset 
disposal. We can manage the whole process from deinstallation to 
asset remarketing. We worry about data destruction, EPA 
regulations, logistics, and insurance so that you don't have too. 
Don't tie up your resources or take chances with you data or 
environmental issues. Call DMD today. 



DMD SYSTEMS RECOVERY, iNC, 

lII Fma: i|Hr7^7IT-DHI Phone; [IB?] 3074 tSD F,gi: (Hd?>3«iT-ltiai 
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McAfee Sees 
Increase In 
PDF Attacks 

Exploits of Adobe's PDF software have 
jumped drastically in the past year, accord- 
ing to McAfee. Toralv Dirro, a security 
strategist at IVIcAfee, says that in 2007 and 
2008, only 2% of malware exploited vulner- 
abilities in Adobe's Acrobat and Reader 
software. That number rose to 17% last 
year and then soared to 28% in the first 
quarter of this year. 

Microsoft has also noticed the rise in PDF 
attacks, noting that it found 46% of all 
browser-based exploits during the second 
half of 2009 targeted vulnerabilities in Adobe 
Reader. And according to Symantec's latest 
Internet Security Threat Report, PDF ex- 
ploits were responsible for 49% of Web- 
based attacks in 2009, compared to only 
11% in 2008. 




Dirro says hackers are finding PDF exploits 
more useful for a number of reasons. Vul- 
nerabilities in operating systems or popu- 
lar browsers are becoming more rare and 
more difficult for attackers to reliably exploit. 
Adobe's PDF software also has a large in- 
stall base, making it "a very attractive tar- 
get," he adds. In addition, PDF files are 
regarded as safe when compared to other 
file formats, Dirro says, making them useful 
in targeted attacks where the victim thinks 
he is opening a safe file. 

Fighting l\/lalicious PDFs 

Adobe has already started to address the 
problem. The company says the majority of 
PDF exploits take advantage of software that 
has not been updated. So, in mid-April, the 
company began silently updating its users' 
copies of Reader and Acrobat. 

Dirro says enterprises can take a number 
of steps to protect themselves from PDF 
exploits. IT should make sure that all com- 
puters are using the latest versions of 
Adobe Reader or whatever PDF software 
they use, he says. They should also distrib- 
ute hotfixes that can quickly address secu- 
rity problems. "This is general advice that 
should be applied to all software used to dis- 
play/process data provided from untrusted 
sources," Dirro says. 

Administrators should also run up-to-date 
antivirus software, which can detect exploits 
in documents and in many cases react faster 
if a new vulnerability is being exploited, he 
says. In addition, enterprises should add pro- 
tection and monitoring on systems used by 
personnel who are likely targets for attacks, 
such as executives and employees in finance 
and research and development. 

Dirro says he expects PDF-based attacks to 
continue, although their extent is hard to pre- 
dict. "In fact," he says, "it can be dangerous 
to completely focus on PDF, as determined 
criminals may use this to use other venues of 
attack that are monitored less while every- 
one's attention is on one single problem." 

by Kyle Harpster 



PHYSICAL INFRASTRUCTURE 



Earning A 

LEED Certification 



Going Green Is A Worthwhile Investment 



by Jean Thilmany 

Achieving LEED (Leadership in Energy 
and Environmental Design) certification, 
whether for a data center or the building in 
which it's housed, can pay for itself in 
terms of cost savings and in marketing 
strategy, experts say, but getting there is 
no small task. 

The LEED green building rating sys- 
tem, developed in 1998 by the U.S. 
Green Building Council of Washington, 
D.C., sets standards for environmentally 
sustainable construction. The program 
certifies buildings based on benchmarks 
for designing, building, and operating 
green buildings. 

Although the USGBC currently doesn't 
offer LEED certifications specifically for 
data centers, those standards will likely be 
coming within the next few years, says 
Tom Lowry, chief technology and sustain- 
ability officer at technology consulting 
company Corus360. His company recently 
revamped a 1974 office building into a 
LEED gold-certified data center. 

The USGBC is currently considering 
standards that would apply exclusively 
to data centers seeking LEED cer- 
tification, according to officials at the 
Lawrence Berkeley National Labora- 
tory, which helped develop the standards 
under consideration. 

The USGBC awards points to enterprises 
seeking certification for their buildings. 
Earn enough points, and you can achieve 
LEED certification at a specific level, 
Lowry says. 



Things To Consider 

If your enterprise is interested in attaining 
LEED certification for its data center, there are 
several things that data center managers and 
enterprise execs need to consider: 

• Enterprise execs must show that plumb- 
ing and indoor water fixtures use a mini- 
mum percentage of water (as laid out by 
the USGBC). 

• They must be able to measure the over- 
all energy efficiency of the data center 
and show that those measurements 
meet certain metrics. 

• Execs need a procurement plan to show 
they will buy environmentally efficient 
products. 

• It is necessary to demonstrate the 
solid-waste transfer program meets 
LEED standards. 

• Managers and execs will need to rou- 
tinely test indoor air for pollution levels, 
which must meet LEED standards. 

• Enterprise executives will need a green- 
cleaning program that makes use of 
environmentally sound products and 
procedures. 



Any building, data centers included, can 
be LEED certified if enterprises follow 
the guidelines set out by the USGBC. 
Tom Coalson, a LEED-certified consultant 
to the construction and building industry, 
says data centers can be certified under a 
variety of programs. The two most com- 
mon being LEED for New Construction 
and LEED for Existing Buildings: Opera- 
tions and Maintenance. 

One of the challenges with LEED certi- 
fication is that it wasn't intended for data 



Key Points 



• You may have an easier time certifying 
the building that houses your data center 
rather than the data center itself. 

• Many LEED contractors likely won't be 
familiar with the complex energy use 
models they'll need to run for data 
center certification. Find a knowledge- 
able contractor who is willing to work 
with you. 

• Moving toward a LEED facility — even if 
you don't become certified — is a money- 
saving investment. 



centers. The program was designed to 
address commercial office buildings. 
Lowry explains that due to the program's 
success, many others — such as data center 
designers — are interested in certifying 
their facilities. 

"Right now, LEED measures a lot of dif- 
ferent factors, like interior air quality, com- 
fort, and accessibility to alternative forms 
of transportation," Lowry says. "There's a 
lot of stuff in there the cynics will say 
doesn't fit the data center. But the bulk of 
the points come from reducing energy and 
water consumption, which are critical to all 
data centers." 

The Benefits Of Certification 

Don't let the lack of LEED certifica- 
tion standards specific to data centers 
deter you from getting started on certifi- 
cation, Lowry says. Making the move 
toward a LEED facility, even if you don't 
achieve certification, is always a step in 
the right financial and environmental 
direction, he says. 

With the recent improvements made to 
the office building in which Lowry works, 
he says his company projects a 27% 
reduction in energy use after meeting 
LEED goals. He explains that the financial 
payoff also comes in terms of customer 
referrals for individuals interested in 
working with an environmentally respon- 
sible data center. 

In some instances, an enterprise may 
decide it isn't feasible at this time to 
become LEED certified. Lowry says an 
enterprise may choose to work to certify 
the building that houses its data center 
rather than certify the data center itself. 
This strategy also reaps cost savings. As 
part of the LEED program, an enterprise 
might paint the roof of the data center 



building white to reflect sunlight rather 
than absorbing it as heat into the build- 
ing, as typically happens. This strategy 
helps the data center housed within the 
building become more energy efficient, 
Lowry explains. 

Whatever route you take — whether 
choosing to certify the data center or only 
the building in which it's located — Lowry 
strongly advises enterprises to hire a LEED- 
certified consultant to work with them dur- 
ing the process. Although a LEED-certified 
consultant isn't necessary, they do know the 
requirements inside out and can offer 
invaluable information and insight, he adds. 
Lowry also recommends choosing contrac- 
tors and subcontractors familiar with the 
LEED process. 

"As LEED certification becomes more 
prevalent, I think a lot of firms are going 
to try to jump into the green building 
space who might not be qualified to guide 
you," Lowry adds. "You really do need 
LEED-accredited professionals to work on 
your project." 

Coalson says you should be aware that 
none of the LEED certification programs 
these professionals must undergo deals 
with IT resource management, so they 
may be unable to advise you when it 
comes to those complex energy models. 

Not Ready Yet? 

If going after LEED certification seems 
too large a hurdle at the present time, 
don't worry. Coalson explains that facili- 
ties managers can take a number of steps 
to reduce energy and power usage so, 
when the time is right, the certification 
process will go smoothly. 

To get a handle on energy usage, data 
center managers can run a thorough and 
item-specific evaluation of the facility's 
power requirements. After that, they can 
make cost-benefit analyses to determine 
areas where they should invest to lead to 
the greatest and quickest return for their 
energy dollars, Coalson says. 

"Any LEED-qualified architect, design- 
er, engineer, or contractor can help with 
all of the energy reduction opportunities 
available on the building side of the equa- 
tion," Coalson says. "But most of these 
contractors will be less qualified to deal 
with IT energy mangement." 

Think long term as you replace equip- 
ment, Lowry advises. "If you're going 
to be putting in new generators, make 
sure they're as efficient as you can pos- 
sibly get," he says. "You might spend 
$4,000 less on a system up front, but it 
will cost you much more to power it over 
the lifetime. This is stuff people think 
about when they're getting a new refriger- 
ator, but it hasn't been looked at as much 
commercially as it should." 

So even if you're not ready to become 
completely LEED certified, taking steps in 
that direction can impact your bottom line, 
Lowry says. 

"LEED gets you to think about the long- 
term impact and benefits you'll get by 
doing what you're doing," he adds. 
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SIX QUICK TIPS 



Better Bandwidth 
Management 

Conserve A Precious Resource 



by Sixto Ortiz Jr. 
■ • ■ 

In today's uber-connected enterprise, 
seemingly plentiful network bandwidth is a 
precious resource. Even though end users 
might believe there's plenty of bandwidth 
to support business applications such as 
ERP systems, email, and VoIP, the fact is 
network engineers are fighting a constant 
battle to allocate bandwidth. 

Thankfully, there are options for net- 
work administrators facing the daunting 
task of managing network bandwidth in 
their enterprises. Read on for some quick 
tips on how to efficiently manage net- 
work bandwidth. 

Ensure Quality Of Service 

One difference in today's operating 
environment is the emergence of applica- 
tions, such as VoIP and video, that require 
plenty of bandwidth and have strict timing 
requirements. Latency can severely affect 
these applications, leading to poor perfor- 
mance and frustrated users. 

Because this type of traffic is different 
from traditional types of network traffic 
such as email and Web browsing, it must 
be prioritized. This is where quality of ser- 
vice, or QoS, comes into the picture. 

Frederic Hediard, vice president of 
product management for Streamcore 



BONUS TIPS 



■ Check bandwidth costs. Cahit Akin, 
CEO of Mushroom Networks (www. mush 
roomnetworks.com), says administrators 
should regularly review bandwidth costs 
(say, every three to six months), so cost 
savings can be identified. 

■ Match bandwidth to job type. Ermis 
Sfakiyanudis, president and CEO of 
eTelemetry (www.etelemetry.com), says 
administrators should determine which 
employees require more bandwidth to do 
their jobs and which ones need less and 
then allocate bandwidth accordingly. 



(www.streamcore.com), says network 
administrators must implement a solution 
that allows bandwidth to be dynamically 
assigned to the most critical traffic to 
ensure that end users have a quality experi- 
ence while using network applications such 
as VoIP and/or video communications. 

Hediard recommends that administrators 
employ specific criteria when choosing a 
bandwidth management application. For 
example, says Hediard, a good bandwidth 
management system should feature auto- 
mated QoS engine capabilities, per-session 
granularity of the QoS engine, up to 100 
classes of traffic or more per system, multi- 
level shaping capabilities, and bandwidth 
management for both a local or remote 
access link. 

Cahit Akin, CEO of Mushi-oom Networks 
(www.mushroomnetworks.com), says cer- 
tain types of traffic — such as VoIP — are 
more sensitive to delay/jitter than others, 
so they require prioritization via QoS. 
Some QoS-enabled routers, he adds, pro- 
vide prioritization for VoIP, Citrix, and 
SaaS types of applications. 

Understand Traffic 

Without understanding network traffic 
patterns, it is impossible for administra- 
tors to determine how to best manage that 
traffic. Without a baseline, any efforts to 
manage network traffic will be akin to 
flying blind. 

Effective bandwidth management, says 
Vess Bakalov, CTO and senior vice presi- 
dent of products for SevOne (www.sev 
one.com), is all about having good informa- 
tion. The more important a link, he adds, the 
more granular the information needs to be. 
For example, Bakalov says, five-minute 
polling for a critical link carrying latency- 
sensitive data is wholly inadequate. Thus, 
administrators must be able to poll critical 
links at high frequencies, preferably 10 sec- 
onds or less. 

Dirk Paessler, CEO of German company 
Paessler AG (www.paessler.com), says 
administrators should understand their 
inbound and outbound traffic by monitoring 
plain bandwidth usage of border firewalls 



through SNMP. Also, internal traffic pat- 
terns should be understood by monitoring 
bandwidth usage for all single ports for 
core switches. Finally, says Paessler, moni- 
toring border switches and/or core switches 
using NetFlow to see the top talkers, top 
connections, and top protocols in a network 
can provide insights into traffic patterns. 

Tools such as NetFlow, jFlow, sFlow, 
and others allow administrators to under- 
stand bandwidth usage, says SevOne' s 
Bakalov. These tools, he adds, allow ad- 
ministrators to quickly and continuously 
monitor the makeup of traffic traversing 
the most critical links, thus enabling the 
detection of bandwidth hogs and wasteful 
traffic, as well as providing an understand- 
ing of applications using the network. 
Then, administrators can make good deci- 
sions addressing traffic prioritization and 
policies that eliminate wasteful traffic. 

Use Trending & Baselining 

Understanding network traffic patterns is 
the first step toward effectively managing 
network bandwidth. A critical piece of this 
puzzle is developing enough of a "traffic his- 
tory" via baselining and trending so abnor- 
mal situations can be spotted and mitigated 
before application performance is affected. 

SevOne' s Bakalov says continuous mon- 
itoring is key to bandwidth management; 
additionally, trending and baselining bring 
a level of automation and proactive predic- 
tion that most other techniques miss. 

Highly granular baselines — 15 minutes or 
less — over predictable business intervals 
can allow administrators to spot deviations 
from the norm before they become prob- 
lems and affect application performance and 
the quality of the user experience. 

Bakalov also recommends that adminis- 
trators collect significant amounts of his- 
torical data so they can develop trending 
that effectively predicts performance. As a 
rule of thumb, he says, admins should col- 
lect historical data for six times the length 
of the interval for which performance 
needs to be predicted. So, for example, 
about six months of historical data is 
required for a one-month prediction. 

Police Users 

A key component of effective bandwidth 
management is the curtailing of wasteful 
bandwidth usage. When users are free to use 
bandwidth wasters such as YouTube, net- 
work performance can be severely degrad- 
ed. Effective policies that prevent wasteful 
bandwidth usage are thus necessary. 

Mushroom Networks' Akin says us- 
ing tools that allow administrators to fil- 
ter and limit nonbusiness traffic helps 



Easiest Tip: 

Share The Responsibility 

Perhaps the easiest thing administrators 
can do to effectively manage bandwidth is to 
spread out the responsibility of doing so. For 
example, says Ermis Sfakiyanudis, pres- 
ident and CEO of eTelemetry (www.etele 
metry.com), managers should be empow- 
ered to monitor their workers' Internet us- 
age. This not only helps policy enforcement 
by placing a heavy price on noncompliance, 
but it also relieves the burden on IT for 
enforcing compliance. 

Best Return On Investment: 

Schedule Bandwidth Usage 

Simple common-sense scheduling can give 
administrators a powerful weapon for effec- 
tively managing bandwidth. For example, 
says Cahit Akin, CEO of Mushroom Net- 
works (www.mushroomnetworks.com), 
processes such as data replication, online 
storage, or the use of disaster recovery-type 
cloud applications can be scheduled to run 
for off-business hours, thus reducing network 
traffic demands during peak hours. 

Also, Akin adds, broadband bonding appli- 
ances allow administrators to combine 
broadband connections such as DSL or 
cable into single-IP connections, thus cost- 
effectively delivering bandwidth, especially 
to SMEs and branch offices. 



administrators limit network traffic that is 
not work-related. 

Todd Whitlock, co-owner of The Help- 
Desk Company (www.thehelpdeskcom 
pany.com), says organizations should throt- 
tle or limit Internet applications such as 
streaming technologies with traffic-shaping 
tools. Additionally, Internet content filters 
should be used to block known adware 
and/or spyware sites, which can not only 
compromise a system by exposing a com- 
pany to data loss and decreased security, 
but can also cause heavy, unwanted traffic. 

Ermis Sfakiyanudis, president and CEO 
of eTelemetry (www.etelemetry.com), says 
administrators must establish Internet usage 
policies that clearly designate unacceptable 
behavior. And, he adds, investments should 
be made in network tools that manage and 
document Web usage, so administrators 
can effectively enforce Internet usage poli- 
cies. There are tools, for example, that alert 
admins to excessive bandwidth consump- 
tion or Web surfing, he says. 
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United States Ranks 
As Top Spam Producer 

Of all the spam-relaying countries, the United 
States ranks No. 1 : According to Sophos, the 
United States accounts for 1 3.1 % of all spam 
produced. Noticeably absent from the top 10 
is China, a country that typically has a pres- 
ence in the top spam distributors globally. The 
United States is part of Sophos' "Dirty Dozen," 
a list of the top 12 spam-deploying countries 
between the months of January and March 
2010. The list includes Vietnam (3.4%), Russia 
(3.1%), and other European countries. Round- 
ing out the top "gang of four" are India (7.3%), 
Brazil (6.8%), and South Korea (4.8%). 

In the past, China's reputation as a spam- 
deploying country was confirmed by its initi- 
ation of targeted attacks on international 
companies and networks. But, in the Sophos 
report, China's spam accounts for 1 .9% of 
the world's spam. 

Other countries will assume the new role of 
reigning spam-sender, though, according to 
Chet Wisniewski, senior advisor at Sophos. 
'The absence of China shows that regardless 
of action in one specific place, spammers will 
find compromised computers and other nations 
will step up to take their place," Wisniewski 
says. This would account for the fluctuation of 
global spamming statistics in recent years. 

'The U.S., UK, and other Western nations have 
declined in percent as more people in the rest 
of the world have come online. We will likely 
see a continued shift to developing nations with 
large populations as their average citizens gain 
access, as well," Wisniewski says. 

High Volume Of Online PCs 

The countries that are seemingly notorious 
for spam distribution are those that host a 
high volume of online PCs. Countries will 
continually swap spots as their Internet net- 
work infrastructure develops. "A country's 
ranking in this list directly correlates to the 
number of Internet-connected PCs and how 
secure they are," says Wisniewski. "Most of 
the top countries in the list remain the same, 
and many of the new entrants that bumped 
other nations are developing nations." 

The short-term threats in developing nations 
are the unprotected or underprotected net- 
work of PCs. The number of vulnerable 
systems will surely increase, leaving them 
susceptible to attacks, botnets, and DDoS 
attacks, Wisniewski says. 

"Spam is a global problem and as more and 
more computers become infected globally, the 
problem isn't likely to let up," says Wisniewski. 
"IT managers need to remain vigilant and 
expect volumes to continue to increase with 
the larger number of new computers 
entering the Internet age." 

by Joanna Safford 
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Availability 
Architectures 

How Do They Compare? 



by William Van Winkle 

• mm 

According to Michael Hogan, global 
offering manager with IBM Global Tech- 
nology Services (www.ibm.com/services), 
data center availability is half art and half 
science. The goal is to protect the critical 
data processing load from unscheduled out- 
ages, either from loss of utility services or 
from a failure of critical IT equipment oper- 
ating inside the data center. While the 
strategies used to assure availability in 
these two areas overlap, the main focus is 
on the IT side. What are the key approaches 
to keeping IT resources available, and 
what are the main benefits and pitfalls of 
these strategies? 

Four Major Options 

In addressing data center availability, 
four architectural approaches are common. 
Some managers see these as competing — a 
"pick one" sort of option — but in reality, 
these four tend to be complementary. 
However, each has its pros and cons. 

N-h1. This is arguably the most popular 
approach for redundancy at the network 
layer. Nh-1 essentially means that in any 
resource pool, there is one extra unit on 
standby, waiting to seamlessly step into the 
place of a failed unit. If a Web server appli- 
cation requires five systems to run 24/7, an 
N-hI architecture would have a sixth system 
running alongside the five, ready to become 
instantly active in case one of the main five 
fails. The good side of Nh-1 is that it signifi- 
cantly increases the "nines" availability of a 
given system or application. The downside 
is the additional complexity and manage- 
ment costs required to maintain it. This can 
include multiple vendor relationships. 

Fault-tolerant hardware. Whereas Nh-1 
tends to apply at the system level, fault- 
tolerant hardware applies at the component 
level. This could take the form of redundant 
power supplies in a server chassis or redun- 
dant hard drives in a RAID. Fortunately, 
fault-tolerant components tend to be rel- 
atively cheap. Unfortunately, specialty 
components, particularly in complex envi- 
ronments, can be very hard to find. 

Clusters. "For servers, the ability to 
abstract the computational workload from 
the physical computer is a crucial compo- 
nent of availability design," says Paul 
Dowling, vice president of ITS Hosting, 
Network, and Information Security at 



Avanade (www.avanade.com). "Many of 
today's failures still occur at the physical 
layer: mechanical issues, overheating, firm- 
ware bugs, and so on. Anything you can do 
to keep your computational workloads at 
arms-length from the physical infrastructure 
will greatly improve your availability 
design. Clusters are especially useful for a 
system's database layer to achieve a degree 
of fault-tolerance in mastering your data." 

On the whole, clustering is now mature 
enough to enjoy widespread, stable sup- 
port from operating systems and appli- 
cations. However, it's still possible for 
cluster nodes to fail and push their loads 
back onto remaining nodes. This means 
that nodes sometimes need to be overbuilt 
or else resort to N+1 types of redundancy. 

Virtualization. Virtualization helps mini- 
mize the risk of hardware failure. Even vir- 
tualized desktops can help reduce system 
downtime and keep workers more produc- 
tive. With recent improvements in hard- 
ware-based acceleration for virtualization, 
there is less and less impact to application 
performance from virtualization. The big 
possible danger is that if the virtualization 
host goes down, multiple virtual machines 
are likely to go down with it. 

Assessing Options 

Rachel Dines, Forrester Research analyst, 
believes that fault-tolerant hardware is the 
most effective way to approach availability, 
although "FT" tends not to come cheap. 
Clustering a group of two or more servers or 
nodes in order to increase application avail- 
ability is often more affordable. 

"Server virtualization is a good alter- 
native to fault-tolerant hardware and 
clustering," says Dines. "You can have 
two fault-tolerant VMs that are running 
lockstep with each other on different 
machines, so if one fails, the other will con- 
tinue without disruption. Alternatively, you 
might have clustered VMs where a surviv- 
ing node in the HA cluster can restart the 
affected virtual machines on another node 
within the cluster. This is not automated, 
however, and will take a few minutes for 
the failed image to restart on another node." 

Hogan believes that these four approach- 
es can't be evenly compared to one another 
if only because no two CIOs have identical 
business needs. And because no group 
can afford to build its own availability solu- 
tions from the ground up, compromises 



have to be made when deciding on any 
given approach or how to interweave multi- 
ple approaches. 

Moreover, it's very difficult to correlate 
dollars to the impact felt by solution com- 
promises, because 10% shaved off of an 
N+1 strategy will likely have a very differ- 
ent impact than 10% taken from a virtual- 
ization budget, and which is "worse" will 
depend on the business and its application. 
Said simply, there are no cookie-cutter 
answers. IT managers must assess all fac- 
tors in each availability study from scratch. 

"Keep in mind that each availability 
design element or strategy has to be consid- 
ered in the bigger picture of what 'avail- 
ability' means to the particular client," adds 
Hogan. "If the key metric is the availability 
of data applications to end users, then the 
organization providing the data applications 
has to use all of the design elements and IT 



Key Points 



• The four major approaches to achieving 
IT data availability are N+1 , fault-tolerant 
hardware, clustering, and virtualization. 
Each approach has its own benefits and 
detriments. 

• While it's difficult, if not impossible, to com- 
pare one availability approach against 
another, it is possible, and even preferable, 
to blend these approaches in order to reach 
an even higher degree of availability. 

• System availability can be viewed as a 
multiple of component availability. Target 
higher component reliability in order to 
improve the larger system. 



strategies available to them to meet the data 
application availability metric that meets 
their business need at the right price point 
and at the appropriate level of risk." 

Dowling urges IT managers to achieve 
enterprise availability through combining 
these approaches in a holistic availability 
design: "With networking components, use 
N+1 designs to build availability into your 
LAN, as with load-balancing firewalls, and 
into your WAN or Internet egress. For serv- 
er components, use a multilayered approach 
to create resilience. This could be an N+1 
cluster of hypervisor hosts to support your 
virtualized computational workloads." 

Ultimately, it may pay to think about a 
system or application as a critical chain of 
dependencies. Availability of the whole sys- 
tem can be determined by multiplying the 
availability of each link in that critical 
chain. To achieve 99.9% availability, for 
example, each link needs to have a much 
higher resilience — an extra "9" of availabili- 
ty, so to speak. In other words, to achieve 
99.9% system availability, managers must 
aim for 99.99% component availability. To 
achieve this, redundancy is critical at each 
link in the chain, and each link in the chain 
needs its own availability design. 



TiPl* RpnilirPmPntQ ^limiTISII'lf '"^strating the overlap between infrastructure and IT equipment availability, this table outlines the 
I ICI ncilUII CIIICIIIo wUllllllal y uptime institute's recommended availability characteristics for the four main data center tiers. 





Tierl 


Tier II 


Tier III 


Tier IV 1 


Active capacity components to support IT load 




N+1 


N+1 


N after any failure 


Distribution paths 


1 


1 


1 active and 1 alternate 


2 simultaneously active 


Concurrently maintainable 


No 


No 


Yes 


Yes 


Fault tolerance (single event) 


No 


No 


No 


Yes 


Compartmentalization 


No 


No 


No 


Yes 


Continuous cooling (load density dependent) 


* 


* 


* 


Yes (Class A) 
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Trading 



Experience to find you the 
right technology solution. 

AS/400 • RS/6000 • Sun Microsystems 
Storage • Tape Backup 



(877)715-3686 | www.itechtrading.cam 



Pegasus Buys, Sells and Offers Depot Maintenance 
& Flat Rate Repair On: 

Kronos Time Clocl(S, Flat Panels, 
POS & Symbol, HHP, PSC, Telxon, 
Metrologic, Barcoding Equip 



We can supply any configuraton you 
need. If you have clocks installed and 
need a specific KOS version we can 
help you. Same is true on I/O Boards. 

Specialize in 420G, 440B, 
460F, 480F, 551, an(l4500's 




Ethernet Daughter Board, Modem Option, 
Remote Readers, Bell Relays, Master Sync, 
Battery Backup Kit, Dual Reader, I/O Board, 
External Reader I/O Board, Touch ID 



PCM 



Pegasus Computer Marketing, Inc. 

(800) 856-2111 I www.pegasuscomputer.net 



MAGNEOT 



Magnext Ltd 

7099 Huntley Rd, Suite 104 1 
Columbus, OH 43229 DATA BACKUP SOLUTIONS 



New & REFURBISHED TAPE &. HARD-DISK BASED BACKUP SOLUTIONS 

Library upgrade packages for higher performance & capacity 
Tape library repair specialists - stock lOOO's of parts 

• SUN SL24 Autoloader, 24-slots (SL24-1L3H-SCSI-Z) $5,100 
IxLTOS LVD SCSI Tape Drive (NEW, 1 yr. warranty) 

• SUN SL24 Autoloader, 24-slots $6,850 
2xLT03 HH LVD SCSI Tape Drives (NEW, 1 yr. warranty) 

• SUN SL24 Autoloader, 24-slots (SL24-1L4-FC-Z) $6,225 
lxLT04 4G FC Tape Drive (new, l yr. warranty) 

• SUN SL48 Tape Library, 48-slots (SL48-lL3H-SCSi-Z) $7,875 
IxLTOS LVD SCSI Tape Drive (NEW, lyr. warranty) 

• SUN SL48 Tape Library, 48-slots $9,600 
2xLT03 HH LVD SCSI Tape Drives (NEW, 1 yr. warranty) 

• SUN SL48 Tape Library, 48-slots (SL48-1L4-FC-Z) $9,000 
lxLT04 4G FC Tape Drive (NEW, 1 yr. warranty) 

— INQUIRE FOR OTHER MODELS - 
Committed to providing high-value, high-quality, products to the IT marl<etplace 



Toll-free 888-NOW-TAPE 614-433-0011 
w.magnext.com ^^^^^nfo(5)nnagnext.com 




Memory for PCs & Macs 

WE BUY 

MEMORY! 



Immediate Need Fo 

1,2, and 4GB modules 
SUN Memory and P4 Processors 
We also buy XEON processors 

CALL TODAY! 



1 



WE BUY ANY 8 

Call Jeff 
(239) 596-2254 



SiMS IMIEIMOIi¥ 

The low price leader for quality memory modules since 1987 

(239) 596-2254 • Fax (239) 596-2256 
jeffsmsmemory@gmail.com • www.smsassembly.com 
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Prepare For Enterprise Growth 

Is your enterprise prepared for brighter 
days ahead? We tall<ed with some indus- 
try insiders to come up with these tips for 
mal<ing sure your data center infrastruc- 
ture is ready for growth. 



Get Ready For 
Server Growth 



22 



■ Enterprises are scouting for poten- 
tial growth opportunities. But why is it 
important to prepare for growth from a 
server perspective? 



Prepare For A Storage 
Explosion I 23 

■ Even in the midst of a severe 
recession, storage requirements 
have not abated, so addressing stor- 
age needs is critical for enterprises 
that want to grow their business as 
the economy recovers. 



Handle Increasing 
Networldng Needs | 24 

■ The two most important objectives 
when dealing with increased network- 
ing needs are using existing resources 
more efficiently and working more 
closely with outside networks 



Prepare For Additional 
Troubleshooting | 24 

■ Even with growth in the business, 
there is a way to mitigate problems in 
the data center, plan for IT scaling, 
and meet the challenge in a way that 
does not cause undo consternation. 



Get Ready For Server Growth 



A Change In Demand Requires Preparation & Strategic Planning 



by Chris A. MacKinnon 

With enterprise growth comes the 
inevitable increase in demand on enter- 
prise servers. Many experts are saying tiiat 
tiie economy is in turnaround mode (or 
close to it), and because of this, small to 
midsized enterprises are scouting for 
potential growth opportunities 
But why is it important to pre- 
pare for growth from a server 
perspective? And how can your 
enterprise prepare for this 
kind of growth? 

Brian Fry, vice presi 
dent of sales and mar- 
keting at RackForce 
(www.rackforce.com), 
says it's important to 
consider servers when 



Consider The Preparation 

So what should data center and IT 
managers be doing to prepare for enter- 
prise growth when it comes to servers? 
Jack Pouchet, director of energy initia- 
tives at Emerson Net- 
work Power (www 
.emerson.com), 
says enterprises 
should "virtual- 
ize, virtualize, 
and then virtual- 
ize some more." 



When preparing for server growth, the 
first step is to get a handle on current 
capacity. Get an accurate snapshot of 
what IT is doing and how much capacity 
is available. 

You can use capacity planning tools 
to predict how systems will respond 
to future business growth. These 
tools can help managers determine 
the least expensive and best perform- 
ing configurations. 

Don't forget about unexpected growth, 
where risk comes into play. You can't 
compare the cost of increased capacity to 
damage that can happen if growth occurs 
without capacity upgrades. 




Key Points 



preparing for enterprise growth because 
insufficient processing power equals 
inefficient IT, which severely limits 
growth. "Today, most enterprises are 
interested in scalable IT, but they lack 
the data center infrastructure to actually 
make it happen," he says. "It is actually 
difficult to acquire physical servers 
quickly, and even if you can, there are all 
kinds of data center challenges to over- 
come to support them." 

Scott Adams, director of product man- 
agement at IT service optimization com- 
pany TeamQuest (www.teamquest.com), 
says server consideration is important 
because many organizations are depen- 
dent on servers to deliver crucial services 
in support of key business processes. "For 
these organizations, when servers aren't 
performing well, business suffers," he 
says. "Managing server capacity is impor- 
tant for maintaining their reputation and 
ensuring profitability." 



He continues, "Seriously, we need 
to examine the many paths to reducing 
the current IT load through server con- 
solidation, application management, 
virtualization (where it makes sense), 
storage management (including data 
deduplication strategies), network opti- 
mization, and an often forgotten as- 
pect of server management — removing 
obsolete, dead, or nonproductive 
servers from the data center." 

Pouchet says it's important to remem- 
ber that as you perform sever consolida- 
tion and virtualization, you should work 
with the facilities team to ensure that prop- 
er power and cooling will be available 
within the new "core" area, as collapsing 
the server and storage systems into a 
smaller footprint will change the dynamics 
of the data center infrastructure. 

According to Peter Sacco, president of 
PTS Data Center Solutions (www.ptsdcs 
.com), data center and IT managers should 
create four-year replacement schedules to 
leverage improvements in performance vs. 
energy consumption. "Also," he adds, 
"server utilization ratios and virtualization 
rates must become metrics that are mea- 
sured and trended. Energy consumption is 
easy to track, even to the server level." 
However, Sacco says the "holy grail" here 
is to weigh this metric against a meaning- 
ful performance metric. "But this is not 
easy," he says, "especially when there are 
no industry standards in this area." 

The first step on the journey, in Adams' 
opinion, is to get a handle on current 
capacity. "Managers need accurate data on 
the work that is being done by IT and the 
amount of available capacity," he says. 



"That information should be put into busi- 
ness perspective so that it becomes clear 
what is going on and the amount of work 
that can be accomplished with the IT that 
is currently on hand." 

Adams says once managers know where 
they stand, they can use a capacity plan- 
ning tool to predict how systems will 
respond to future business growth. "Such 
tools," he says, "can simplify the effort 
required to accurately predict just when 
business growth will exceed available 
capacity." Adams says a good capacity 
planning tool can also help managers to 
determine the least expensive and best 
performing configurations for 
meeting future business 
needs. 



Consider The Changes 

According to Fry, the kinds of changes 
that data center and IT managers can 
expect with today's growth include fully 
converged networks and cooling systems 
that are capable of handling much higher 
density and cold or hot aisle containment. 
He says newer data centers are engineered 
better (and twice as efficient) than data 
centers built in 2005. He notes, "Most 
enterprises (and their customers) want Tier 
III now, but to do this, the building must 
meet a number of criteria in power redun- 
dancy, plus be a single-story facility." 

Pouchet says you can actually get 
somewhat ahead of the curve and be pre- 
pared for unexpected growth at the same 
time by organizing existing IT equipment 
in zones or pods and identifying a zone or 
pod for future growth, where all new IT 
equipment must meet new efficiency 
standards, be optimized for the new 
power and cooling infra- 
structure associated with 
the zone, and perhaps 
include some degree 
of cooling contain- 
ment and security. 
From a power 
and cooling infra- 
structure perspec- 
tive, Pouchet says 
you can expect to 
see increases in power 
density from consoli- 
dation, virtualization, 
and the introduction 
of new server plat- 
forms (especially blade 
servers). He says this will 
require greater coordination 
between IT and facilities to 
I ensure the proper infrastruc- 
^^•^ ture is in place to support new 
IT deployments. 



Top Tip: Consider Tlie Cloud 

Depending on what's expected (or unexpected), data center and IT manager strategies will 
vary. But according to Scott Adams, director of product management at TeamQuest (www 
.teamquest.com), one thing's for sure: Sudden or slow growth can both be accommodated 
with the same sort of capacity planning techniques and considerations, but unexpected 
growth is more of a challenge. "For unexpected growth," Adams says, "risk becomes more 
of a factor. An organization needs to estimate the likelihood of unexpected growth. Then, 
the cost of increased capacity must be weighed against the damage that could ensue if the 
growth occurs without capacity upgrades." 

Adams says one option that is being considered by IT organizations is to allow peak workloads 
to be accommodated by tapping into cloud computing resources. He says this can be a way to 
avoid sizing internal systems to accommodate a level of growth that is most likely not going to 
happen. The downside, he says, is that cloud computing Introduces a whole new set of risks and 
financial variables to the capacity management equation. 
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Prepare For A Storage Explosion 

As The Economy Improves, Storage Demands Will Continue To Grow Unabated 



by Sixto Ortiz Jr. 
■ ■ • 

The burgeoning economic recovery 

means enterprises large and small must 
begin to plan for growth. One thing's for 
sure: Even in the midst of a severe reces- 
sion, storage requirements have not abat- 
ed, so addressing storage needs is critical 



Key Points 



Enterprises must establish a storage 
capacity baseline, which, combined with 
a forecast for future growth, will help 
identify gaps and the technologies need- 
ed to close them. 

Software-based technologies such as 
virtualization, cloud computing, and 
SaaS will become more important in the 
years ahead. 

Enterprises must invest in technologies 
that are able to scale well in an unpre- 
dictable but rapid growth environment. 



for enterprises that want to grow their 
business as the economy recovers. 

Enterprises must carefully think about 
the storage options that will enable them 
to accommodate ever increasing data stor- 
age requirements. Strategies must be 
developed that not only take into account 
growth but also the rate of growth and the 
predictability — or unpredictability — of 
that growth. The fact that the recovery is 
beginning to pick up steam is encourag- 
ing; companies that likewise want to pick 
up steam must evaluate growth strategies 
for their enterprise storage systems. 

Strategies For Growth 

Without knowing where to start, it's 
impossible to determine an effective and 
efficient strategy for growth. A key to 
gaining that knowledge is determining cur- 
rent storage requirements, says Aaron Van 
Velsir, senior account executive at Abtech 



Koka Sexton, manager of business 
development for Paragon Software Group 
(www.paragon-software.com), says admin- 
istrators should be sure to use solutions 
that scale easily to growing storage 
demands. Consolidating free space 
with software can reduce new 
hardware expenses and maxi- 
mize existing storage infra- 
structure. Sexton says 
however, when new vir- 
tual machines or virtual 
storage is deployed, 
administrators should 
look for tools that can 
manage different virtu- 
al platforms. 

Technologies 
For Growth 

According to 
Berkeley's School 
of Management, 
more data will be 
stored in the next three 
years than in the pre- 
vious 40,000, says 
Jason Collier, 
CTO and founder 
of Scale Comput- 
ing (www.scalecom 
puting.com). In order 
to meet this challenge 
administrators must 
consider the fact 
that scale-up ar- 
chitecture is out- 
moded and not well 
equipped to handle rapid 
data capacity consumption. 

Collier says scale-out technologies, 
which were available in high-performance 
enterprise environments and priced at 
a premium, will now enjoy increased 
demand and phase out scale-up technolo- 
gies. Also, says Collier, administrators 
should prepare for the dominance of com- 
modity components used for previously 
specialized use cases such as data storage. 




environments on servers, with a growing 
trend toward virtualization and cloud com- 
puting. Also, adds Sexton, administrators 
must plan for increasing processor loads 
and networking requirements and should 
aim to achieve a deeper understanding of 
virtual environments and how they can be 
utilized to manage server resources. 



Administrators must plan for increasing processor loads 
and networking requirements and should aim to achieve a 
deeper understanding of virtual environments and how they 
can be utilized to manage server resources. 



Systems (www.abtechsystems.com). Van 
Velsir recommends that administrators per- 
form a trend analysis, which consists of 
current information plus any new applica- 
tions, projects, and new users to be added. 
With this data, future growth patterns can 
be extrapolated; assuming a three- to five- 
year life expectancy for a storage array 
means administrators should develop total 
storage requirements for three to five 
years, says Van Velsir. 

Enterprise growth requires scalability in 
the data center; with storage technology 
that doesn't scale well, enterprise growth 
will be, at best, difficult to manage. At 
worst, the lack of scalability could hinder 
business growth when it's needed most. 



Virtualization is a technology that con- 
tinues to garner a lot of attention, so 
administrators should keep their eyes on 
developments in this field. Joe Long, 
director of storage solutions for Logicalis 
(www.logicalis.com), says storage virtu- 
alization will mature to the point that 
storage becomes a true commodity, and 
storage management tools will enable 
utility pricing for storage so users can 
switch from a fixed-price cost model to a 
storage-as-a-service model. In other 
words, the much-predicted path toward 
the conversion of storage into a commod- 
ity-like service will continue. 

Paragon's Sexton says IT managers 
must be prepared to manage larger storage 



In the coming years, smaller companies 
will begin moving from direct-attached 
storage systems to external storage 
devices, says Abtech' s Van Velsir. As 
organizations discover that managing 
direct-attached external disk arrays can get 
cumbersome, they will start looking at 



shared storage environments such as SAN 
and NAS, which have better management 
tools and reliability. 

Calibrate Strategies To Growth 

The effectiveness of a strategy is 
dependent on the type of growth 
expected in the business. Growth 
can be steady, but in most real- 
world cases, growth comes in 
spurts as business opportuni- 
ties arise. 

L Allen Darnell, COO of 

iSeatz (www.i-seatz.com), 
a New Orleans-based tra- 
vel technology company, 
points out that it is criti- 
cal for companies to 
expect rapid growth 
and plan for it with- 
out oversizing the 
solution. Darnell 
points to SaaS 
offerings as 
examples of 
on-demand 
solutions that 
small compa- 
nies can call upon 
so that they can 
scale up very quickly 
without incurring mas- 
sive front-end costs. 
Because new com- 
panies today require 
these types of servic- 
es, he adds, many are 
choosing this route instead 
^ of going with traditional 

data centers. 
And how should administrators go 
about the difficult task of forecasting 
growth? According to Ken Barth, vice 
president of storage at SolarWinds, admin- 
istrators should look at storage capacity 
and consumption to forecast future storage 
growth, combined with performance usage 
and trends along application, business unit, 
and SLA lines to choose the right type of 
storage for storage, process, policy, perfor- 
mance, and availability requirements. 

Growth can be unpredictable, so admin- 
istrators should calibrate their storage 
technology choices to prepare for such 
growth. Abtech' s Van Velsir says compa- 
nies that have very stable and predictable 
growth can get away with buying storage 
devices that have smaller footprints with 
relatively limited expandability. However, 
because the growth of storage can be quite 
rapid and/or unpredictable, he adds, it is 
much wiser for a business to invest in a 
solution that can be expanded to accom- 
modate much larger storage requirements. 
Even though this approach may cost a lit- 
tle more up front, the business will enjoy 
benefits as the need for constant forklift 
upgrades is eliminated. 



Top Tip: Don't Rely On Hardware Purchases 

According to Jason Burnett, director of networl< services at NeoSpire (www.neospire.net), it is not 
sufficient to merely "throw hardware" at the problem of enterprise growth. Administrators should 
plan carefully for both scalability and sustainability while considering facets such as green initia- 
tives, virtualization, the ability to support new technologies, and the increasing need for perfor- 
mance and space. 
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Handle Increasing 
Networking Needs 

Whether Networking Demands Increase Suddenly Or Gradually 
IT Must Be Ready To Act Fast 



by William Van Winkle 

Although the market continues to be 
uncertain and news headlines have their 
fair share of gloom, one thing can't be 
argued: Recent growth in the networking 
market clearly shows that enterprises 
are investing in networking infrastruc- 
ture and increasing capacity. This likely 
has little to do with supporting internal 
growth fueled by rising staff levels; 
rather, it seems that companies are 
increasing their networking in order to 
meet external demands, enable innova- 
tion, and remain competitive. 

"There are several trends that are happen- 
ing in SME data centers that should be of 
interest to every SME IT manager — for 
example, data center consolidation, virtual- 
ization, and cloud services," says Ronen 
Kenig, product marketing manager for Rad- 
ware's Alteon Products (www.radwarealteon 
.com). "All of these trends are designed not 
only to reduce CAPEX and OPEX of SMEs 
on their own infrastructure in their own 
premises, but also to increase the flexibility 
and agility of the network infrastructure so it 
can react quickly to meet changing business 



requirements, such as new services, new 
applications, and increased capacity." 

The two most important objectives are 
using existing resources more efficiently and 
working more closely with outside networks, 
such as those offered by cloud providers. 



Key Points 



Find more network bandwidth by reducing 
client loads, which can be accomplished 
through such measures as Web page 
caching and content/site filtering. 

Unified networking can ultimately con- 
serve bandwidth and increase network 
efficiency, but it may require investing in 
10 Gigabit Ethernet equipment across a 
large swath of the enterprise's LAN. 

The key to accommodating future 
capacity needs is to have a scalable 
infrastructure already in place, whether 
by "borrowing" bandwidth from one 
network service for another until more 
capacity can be brought online or by 
using pay-as-you-grow services. 



After all, in the end, there are only two 
ways to increase available bandwidth: 
either reducing demand or adding capacity. 

Dropping Demand 

For those who want to decrease their 
bandwidth demands, Mark Tauschek, 
research director at Info-Tech, rec- 
ommends investigating Web page 
caching. There are free Web- 
caching proxy of- 
ferings available 
on the Web that 
can drastically in- 
crease your net- 
working capacity. 
Alternatively, 
rather than bring 
more data in, 
managers can 
make sure that 
fewer requests 
go out. 




Prepare For 

Additional Troubleshooting 

As Your Company Grows, New Problems Can Arise 



by John Brandon 

Growth in any enterprise is a good 
thing: It means the company is healthy, 
sales are clicking, and excitement is in the 
air. As with any positive change in life, 
however, there are unexpected challenges 
that arise, including new technical hurdles 
that can cause headaches for IT. Fortu- 
nately, even with growth in the business, 
there is a way to mitigate problems in the 
data center, plan for IT scaling, and meet 
the challenges in a way that does not cause 
undue consternation. Part of the answer is 
to have a growth plan in place, one that 



Key Points 



Develop better monitoring to understand 
how IT and the company are growing and 
establish a process for how to deal with the 
monitored growth. 

Consider the cloud as a stop-gap measure 
for expanding services. 

Look closely for more subtle growth prob- 
lems such as cable management and new 
cooling needs. 



you implement as a company grows. A 
second tactic is to move some services to 
the cloud, which can scale rapidly as you 
ramp up services. 

"As any business grows, the number of 
servers tends to grow, as does the reliance 
on those servers," says Nick Cavalancia, 
vice president of Windows Management 
for ScriptLogic (www.scriptlogic.com), a 
server management company. "Terms like 
SLA are heard on a daily basis and focus 
changes from implementing cool tech- 
nologies to supporting them and keeping 
them running." 

Cavalancia says there is a two-pronged 
approach to troubleshooting growth issues 
in a small to midsized enterprise: The first 
approach is better monitoring of servers 
and other services, and the second is 
building an adequate response to those 
changes that are monitored. Cavalancia 
says IT departments should use their own 
expertise in managing a data center to 
manage growth. 

Troubleshooting Growth Problems 

The "problem" of growth is a bit hard to 
grasp. All growth is good, and better sales 
and expansion of the core business likely 



means more resources and more funds to 
deal with IT expansion. Yet, according to 
Leon Thomas, president and CEO of con- 
sulting firm Jelecos, growth also means IT 
must ramp up in many different areas to 
meet the new demand. This includes such 
seemingly innocuous areas as cable man- 
agement, heat dissipation for new servers. 



power capacity in the data center and 
requirements for local utility companies, 
and compliance issues. 

Thomas says the best strategies for 
dealing with this new growth are consid- 
ering virtualization, developing new 
standards for documentation and other 
policies that govern use of IT services, 
surveying which service providers exist 
to help with the new growth, and analyz- 
ing IT best practices to make sure staff 
can deal with the unexpected growth and 
react accordingly. 

He also notes that moving some IT 
services to the cloud can help a company 
in the middle of a quick growth period. 
However, Thomas says, the cloud is not 
necessarily a one-size-fits-all answer, 
and companies should be diligent about 
determining exactly which services need 
to grow, when they should grow, and 



Top Tip: 

Don't Forget Security & Compliance Concerns 

Security becomes a new concern when a company grows because IT starts offering new ser- 
vices such as remote access and branch office access, so it is important to develop policies 
now for the expected growth. "Establish a written security policy for all staff to follow," says 
Doug Blakey, president of WaterlooSecurity (www.watsec.com). 'This describes the ground 
rules for things like email practices, hiring and firing policy, and information access. For an 
SME starting from appropriate boiler plates, this can be accomplished in a couple of hours." 

As a company grows, there are also new regulations to follow and a greater need for offsite 
storage. Blakey advises, "IT managers should know that privacy legislation, such as the 
U.S. Patriot Act and Canada's PIPEDA, place obligations on SMEs to put in place measures 
such as encryption and network fortification to ensure the integrity of data and electronic 
records," especially as the company grows and needs to manage more data. "Failure to 
comply with the privacy regulations can result in an intrusive audit, financial penalty, and/or 
lawsuits from aggrieved parties," he says. 
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Content filtering remains an old-fashioned 
but nonetheless effective solution. Few 
users on the network will have a business- 
oriented need for viewing video or engag- 
ing in social media. Most security suites 
will provide a way to block such content 
on a per-user basis and thus reduce the 
aggregate bandwidth load. 

"Within the data center, regaining 
bandwidth can be trickier, especially if 
you have a lot of incoming requests. 
There are things you can do, but they cost 
money," says Info-Tech's Tauschek. 
"You can do application acceleration, 
which reduces bandwidth while accelerat- 
ing Web apps. In getting the most out of 
existing capacity, virtualizing servers is a 
way to get more out of your bandwidth. 
Say you've got five servers with Gigabit 
Ethernet connections and aren't using all 
of that bandwidth. If you virtualize those 
five onto one box and still fit within that 
one Gigabit pipe, then you've freed up 
four Gigabit feeds." 

Adding Capacity 

Added capacity not only helps with con- 
tinuing growth but can also help with 
containing expenses. Lee Ratliff, senior 
analyst at iSuppli, notes that unified net- 
working is one of today's top trends for 
improving network capacity. A unified 
network platform entails merging multiple 
network applications onto a single infra- 
structure. In particular, many enterprises 
are consolidating their storage-area net- 
works with their local-area networks. 

"You just run storage-area networking 
as a service on top of your regular LAN," 
says Ratliff. "This is mainly due to [the] 
Fibre Channel over Ethernet protocol, 
running on 10 Gigabit Ethernet. This isn't 
being widely deployed yet, probably 



because of initial deployment costs, but it's 
on a lot of people's radar and is clearly 
going to happen. It's something data center 
managers need to be aware of so they can 
avoid redundancy in networking equipment 
and resources." 

The biggest cost in implementing a unified 
networking platform will be in upgrading 
switches. Most of the Gigabit switches 
throughout the organization's primary infra- 
structure will need to be replaced with a 10 
Gigabit equivalent, and today those are far 
from cheap. Moreover, the unified network- 
ing platform may necessitate upgrades in 
other equipment, such as routers and client 
adapters. For example, if a workstation had a 
Gigabit Ethernet adapter and a 4Gb Fibre 
Channel adapter, these would likely need to 
be consolidated into a single 10 Gigabit 
Ethernet adapter. 

The On-Demand Option 

Of course, there's no avoiding the fact that 
plenty of uncertainty remains in the market, 
so enterprise managers should continue to 
plan for multiple growth scenarios, both 
rapid and gradual. The key, according to 
research from Cisco's Infrastructure and 
Borderless Networks group, is to implement 
an extensible framework that can quickly 



accommodate scale and services as needed. 
A proper architecture should allow IT man- 
agers to evolve their networks, regardless of 
the pace or time horizon. 

Ideally, IT will find itself with enough 
budget dollars to implement a more scalable 
architecture, but miracles can't always hap- 
pen overnight — or even in one quarter. 

"If your head count increases unexpectedly 
and you need to increase capacity, you might 
be borrowing in the short term from your 
SAN and then paying it back in the next 
quarter as you get more budget," says Info- 
Tech's Tauschek. "But you need a flexible, 
scalable architecture to make that happen." 

Alteon' s Kenig points to on-demand, 
pay-as-you-grow offerings as a means for 
handling unexpected or sudden growth. 
"The network infrastructure of an organiza- 
tion should be designed to allow flexibility 
and on-demand scalability to better meet 
business growth and avoid expensive 
upgrade projects on a regular basis," he 
says. "An interesting solution for this chal- 
lenge is the on-demand approach [that 
enables] customers to purchase only what 
they need at the onset to meet their initial 
business needs but [lets them] scale as 
needed when faced with unexpected traffic 
spikes or increased growth." 



Top Tip: 

Implement A Network Management System 

According to Mark Tauschek, research director at Info-Tech, any enterprise is "flying blind" without 
a network management system to help show it where network capacity and bandwidth problems 
are coming from. "With a network management system, you can see where you're at [and] what 
apps are using the bandwidth, set alarms, etc.," says Tauschek. "You can also extrapolate growth 
curves for infrastructure purchasing." 

There are plenty of fee-based network management systems available, but you can also find 
worthwhile open-source options on the Web. 



when IT should start leveling off those 
services, as it is easy to expand and scale 
beyond what you need. 

Thomas says the strategies for han- 
dling growth differ depending on the 
amount of resource capacity you want in 
reserve. "For example, a faster-growth 
company would purchase enough capac- 
ity to enable at least a year of growth 
support, depending on the systems and 
technology," he says. With that in mind, 
admins should look at areas of potential 
growth and plan accordingly. "If there 
is a possibility of unexpected growth, 
a manager would want to model the 
scenarios," he explains. "What if our 
bandwidth and storage requirements 
increased 4x next month? Could we 
handle it? What would it mean to our 
overall plan? Is the business aware of 
the capital expense and operating 
expense implications?" 

Interestingly, this balancing act of 
ramping up services, but not to the point 
that they exceed the actual demand for 
services, is a process that requires con- 
tinual analysis and good management, 
even in the midst of the new growth. 
Adding too many servers, for example, 
has an impact on the cooling require- 
ments, space constraints, and overall 
management chores. 

Other Challenges With Growth 

Growth presents a number of chal- 
lenges to IT departments, chief among 
them being that there is simply more that 
needs managing — more equipment, more 
employees, and more security issues, to 
name a few. Even something as small as 
cable management can lead to problems 
down the line. Employee education is key 



to making sure new systems and processes 
work properly, and performing extensive 
testing before deploying new solutions can 
cut down on your troubleshooting load 
later on. Finally, it's vital to establish a 
system for tracking and managing 
problems that arise once your new 
employees or equipment 
is in place. 

"Growth leads to a 
range of new chal- 
lenges for the IT man- 
ager," says Paul 
Salazar, a general 
manager at OTRS 
(www.otrs.com), 
an open-source 
help desk compa- 
ny. "What might 
have been man- 
aged on the 
back of an 
envelope in 
the past, or 
as a casual 
hallway con- 
versation 
between a 
user and a 
sysadmin. 



now requires a more formalized system of 
tracking and managing." 

In the end, IT can respond to compa- 
ny growth by using better manage- 
ment practices, scaling out to 
the cloud for some services, 
looking closely at expansion 
options, avoiding over-scal- 
ing, and examining all of 
the minor details 
that often 
became 
major 
hurdles. 




I Vision Solutions 
To Acquire Double-Take 

Vision Solutions, a disaster-recovery soft- 
ware manufacturer, says it plans to acquire 
Double-Take Software, a vendor of data pro- 
tection, recovery, and replication software. 
The deal will allow Vision to buy Double- 
Take for $242 million, which Double-Take's 
board unanimously approved. That trans- 
lates to about $10.55 in cash per share, 
which caused concern among some of 
Double-Take's shareholders. As a result, a 
New York-based law firm has already begun 
to sign up those with issues and begin a 
class-action shareholder lawsuit against 
Double-Take. Executives at Vision Solutions 
declined comment on the acquisition, citing 
SEC regulations. 

I Microsoft Files Suit 
Against Salesforce.com 

IVIicrosoft is suing Salesforce.com in the 
U.S. District Court in Seattle. The software 
company is alleging Salesforce.com, a soft- 
ware-as-a-service provider, violated nine 
IVIicrosoft patents related to its CRIVI capabili- 
ties. However, the patents in question aren't 
specifically tied to IVIicrosoft's CRIVI applica- 
tion, IVIicrosoft Dynamics. IVIicrosoft brought 
the suit, it says, because Salesforce.com has 
profited from Microsoft's patents. Microsoft 
wants both temporary and permanent injunc- 
tions on Salesforce. corn's products, as well 
as monetary damages, including legal costs. 
Salesforce.com, which recently acquired 
Jigsaw, a contact-data vendor, reported $1 .3 
billion in sales for 2009 and has yet to com- 
ment on the lawsuit. 




I Global IT Services 
See Drop In Revenue 

Revenue from global IT services dropped 
5.3% in 2009, according to Gartner. In 2008, 
Gartner reported $805 billion in IT services 
revenues; in 2009, that amount dropped to 
$763 billion. Among the top five IT services 
vendors, revenue at Accenture dropped 
11.8% and HP dropped 10.4%, with IBM 
(6.6%) and CSC (6.5%) not far behind. 
Vendors based out of India showed 3.6% 
growth last year, compared to a 15.4% 
increase reported in 2008. Kathryn Hale, 
Gartner's worldwide IT services group re- 
search vice president, attributes the drop 
to businesses that have shifted their empha- 
sis from aggressive sales to strategies that 
maintain current revenue levels. 

I Security Guard Pleads Guilty 
To Hacking 

Jesse William McGraw, a former night secu- 
rity guard, pled guilty to two felony counts of 
transmitting malicious code. The 25-year- 
old, known as "Ghost Exodus" in the hacker 
community, planned an attack at his place of 
employment, the North Central Medical Plaza 
in Dallas, Texas. He scheduled the DDoS 
attack on the hospital, including its HVAC 
system, for July 4, 2009. He was caught after 
posting videos on YouTube of himself plan- 
ning the attack on the medical center's com- 
puters. He has been in custody since his 
arrest last June and will face up to 20 years 
in prison for the crime. 
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Storage Encryption 



Addonics CipherChain 
ExpressCard 




The Addonics CipherChain ExpressCard for notebooks 
securely encrypts data heading to your external hard 
drive or SSD on the fly. It doubles as a hardware token to 
decrypt the data you demand from the drive, letting you 
access your data without client software, a password, or 
biometric authentication. The upshot is that your external 
drive will be unreadable should it be stolen or misplaced. 
The CipherChain's data interface utilizes a fast eSATA 
hybrid port with a provision for USB power. 

• 256-bit AES full-disk encryption 

• Compatible with ExpressCard 34 or 54 slots 

• NIST- and CSE-certified encryption engine 

• Identical cipher key sets available for use with 
multiple devices 

Best For: Users with a need to protect top-secret data. 

Price: $89 



Check Point Abra 



[SI Check Point 



SaiDisk 




r K 



The Check Point Abra is an encrypted SanDisk USB 
flash drive that turns a Windows computer into a secure, 
portable workspace with the user's desktop, application 
list, files, and email. It sports built-in VPN connectivity 
and Check Point virtualization and security features. 

• Hardware and software encryption 

• Program control regulates select application types 

• Virtualization technology isolates a work session from 
the host 

• Plug and play for ease of use 

Best For: Users, contractors, and/or remote workers. 
Price: $140 for 4GB; $210 for 8GB 



Check Point 

Full Disk Encryption 




Automatic encryption of notebook and desktop hard drives 
protects critical information and prevents corporate data 
breaches. Check Point Full Disk Encryption provides a 
high level of data security with multifactor preboot au- 
thentication and strong encryption algorithms. The entire 
drive's contents, including the operating system and 
even temporary files, are automatically encrypted for a 
completely transparent end-user experience. 

• Safeguards corporate information from unauthorized 
access and data breaches 

• Centralized deployment, management, and logging 
simplifies administration 

• Security certifications include PIPS 140-2, Common 
Criteria EAL4, and BITS 

• Comprehensive platform support includes Windows 7, 
Mac OS X 10.6 (Snow Leopard), and Linux 

Best For: Enterprises and organizations with mixed 
platforms. 



(408) 573-8580 
www.addonics.com 



(800) 429-4391 
www.checkpoint.com 



(800) 429-4391 
www.checkpoint.com 



Hitachi 

Travelstar 

7K500 




The Hitachi Travelstar 7K500 is a hard drive suitable for 
laptop use as well as server duty. It comes with optional 
hard drive-level and bulk data encryption, which is useful 
for immediately wiping the drive at the end of its life cycle. 
This Travelstar is designed to be both shock-tolerant and 
easy on battery life for mobile applications. Hitachi also 
touts its suitability for use in surveillance systems, routers, 
and more. 

• Compliant with the TCG Opal Storage Security 
specification 

• 7,200rpm rotational speed for performance 

• 2.5-inch form factor 

• Capacity range of 120 to 500GB 

Best For: Businesses with a need for data security in 
notebooks, servers, and elsewhere. 

Price: $159.99 for 500GB (estimated) 



PGP Portable 



The idea underlying this PGP application is to enact 
portable software-based data encryption on any remov- 
able storage device, disc, or network share. After your IT 
department uses PGP Universal Server (sold separately) 
to create PGP Portable media, end users can access 
said media using a simple passphrase. This allows for 
easy sharing of protected data as well as read/write col- 
laboration without requiring users to install any software. 

• Ideal for data sharing with users who do not have any 
PGP software 

• Create PGP Portable on Microsoft Windows using 
PGP software 

• In-place editing enables secure multiuser collaboration 

• Enables disaster recovery and forensics 

• Supports automation and provisioning 

Best For: Midsized to large enterprises. 
Price: $37 per user and up 
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Proofpoint Archive is a software-as-a-sen/ice solution 
that automatically captures email in a centralized, 
searchable repository for legal discovery, compliance, 
and mailbox storage management needs. Although 
Proofpoint manages the data, the archive is secured 
using the company's patented DoubleBlind Encryption 
process that ensures Proofpoint can never read it. 

• Automatically stubs large attachments and removes 
PST files 

• Provides fast search capabilities 

• Low price point 

• Rapid deployment 

Best For: Medium-sized to large enterprises using 
Microsoft Exchange. 

Price: $30 per user per year 



Product 



Description 



Contact 




Contact 



(800) 801-4618 
www.hitachigst.com 



(650)319-9000 
www.pgp.com 



(408)517-4710 
www.proofpoint.com 
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Check Point Media Encryption 




Full Disk En&ryption and 

Media Encrypiiori Sofcwara Biades 



V 



Check Point Media Encryption secures sensitive corporate data by 
encrypting removable media such as USB storage devices, CDs, 
and DVDs. It's a device and port control solution integrated with a 
single endpoint security agent. Media Encryption's aim is to simplify 
compliance efforts and reduce administrative overhead, according 
to the company. All device content is automatically encrypted in the 
background without impacting the user. Check Point says. No client 
installation is required for secure access to encrypted media on 
unmanaged computers. 

• Supports Windows 7 

• Blocks incoming malware 

• Comprehensive control of endpoint ports and protection of 
corporate data stored on removable media and devices 

• Seamless integration with Windows' CD/DVD wizard and Nero 9 

• Simplified administration and operation with single agent installa- 
tion, centralized management, and central policy enforcement 

• Integrated endpoint and network security capabilities, including 
centralized logging of data movement and media usage for 
streamlined compliance and forensic analysis 

Best For: Businesses with removable-storage security concerns. 



(800) 429-4391 
www.checkpoint.com 



GuardianEdge 
Hard Disk 
Encryption 



- - ED S [S HI 



GuardianEdge 



GuardianEdge says its Hard Disk Encryption reduces 
security management, implementation, and deployment 
costs by allowing organizations to leverage existing IT 
infrastructure. It natively integrates with Microsoft Active 
Directory, for which it features single console support 
along with Novell eDirectory and non-domain end points. 
It also can manage other GuardianEdge data protection 
products to simplify organization and facilitate adminis- 
trator access to endpoint data protection. 

• Provides strong protection for sensitive data 

• FIPS 140-2 certified 

• Supports 128- and 256-bit AES encryption 

Best For: Enterprises and organizations of all sizes, 
including health care, government, financial services, 
and education. 



(866) 277-7760 
www.guardianedge.com 



GuardianEdge 

Removable Storage Encryption 



GuardianEdge 



GuardianEdge 



Removable storage devices can put businesses at risk of 
malware infection and data loss. GuardianEdge Removable 
Storage Encryption attempts to solve this problem by encrypting 
data by policy on any storage device or media. This capability 
lets employees safely transport and use data on portable media 
and securely distribute data via email. GuardianEdge says its 
technology also minimizes deployment, management, training, 
rollout, and support requirements by making maximum use of 
existing infrastructure. 

• Supports USB flash drives, external hard drives, and CDs/ 
DVDs in addition to other external storage devices such as 
MPS players, phones, and cameras 

• Works with GuardianEdge Device Control to monitor and 
control device usage for file transfer activity 

• Applies policy-based encryption 

• Combines support for Novell eDirectory and Microsoft Active 
Directory in one console 

• Natively integrates with Active Directory 

Best For: Enterprises and organizations of all sizes, including 
health care, government, financial services, and education. 



(866) 277-7760 
www.guardianedge.com 



Sophos Endpoint Security 
& Data Protection 9.0 



endpoint 
security 
and data 
protection 




Sophos Endpoint Security and Data Protection offers a single 
integrated solution for both anti-malware and data protection. A 
sole agent delivers antivirus and antispyware, a client firewall, 
data loss prevention content monitoring, management of re- 
movable storage devices, and detection and blocking of un- 
authorized software. Combined with integrated network access 
control and encryption to ensure policy compliance and secure 
your data, the product provides preventive endpoint and data 
protection to save you time, money, and resources. A single 
license means you can protect all users and computers across 
Windows, Mac, Linux, Unix, and other platforms. 

• Can whitelist or blacklist VoIP, IM, P2P, and other applications 

• 24/7/365 technical support included in price 

• Offers compliance and user-based reports; reports can be 
customized and emailed to select recipients 

Best For: Midmarket enterprises with 100 to 5,000 users or more. 

Price: $68.50 per user (500 users; three-year license) 



Sophos SafeGuard Easy 5.50 



SOPHOS 



Sophos SafeGuard Easy protects confidential data on 
laptop and desktop PCs with full-disk encryption for inter- 
nal and external hard drives, and it does so easily and 
transparently, the company says. If a PC is lost or stolen, 
the encrypted data will be unreadable even if the hard 
drive is removed. In addition to protecting your sensitive 
data, SafeGuard Easy helps your business comply with 
data security regulations. 

• Transparent full-disk encryption for laptops and desktops 

• User-friendly power-on authentication, synced with 
single sign-on to the OS for added convenience 

• Biometric authentication with Lenovo fingerprint readers 

• Encryption compliance monitoring that is easily inte- 
grated with existing system management tools 

• Recovery options for keys, data, and forgotten pass- 
words, even when the help desk cannot be reached, to 
ensure that your operations can continue 

• For centralized management, there's an upgrade path to 
Sophos' advanced data protection solution 

• Advanced tech support options available 

Best For: Midmarket enterprises with 1 00 to 5,000 users 
or more. 

Price: $50 per user (1 ,000 users for one year) 



Sophos SafeGuard 
Enterprise 5.5 




SafeGuard Enterprise 



SafeGuard Enterprise provides multilayered endpoint data 
security combining encryption and DLP. The centrally man- 
aged solution secures data on desktops, laptops, PDAs, 
smartphones, and removable media. Its transparent data 
encryption prevents malicious users from reading lost or stolen 
media, and it even enhances user productivity, according to 
Sophos. SafeGuard Enterprise protects confidential informa- 
tion from data breaches in accord with regulatory mandates. 
A modular information protection control solution, SafeGuard 
Enterprise enforces policy-based encryption for PCs and 
mobile devices across mixed environments. 

• Prevents endpoint data leakage via wireless and physical 
interfaces and removable devices 

• Central administration console 

• Modular architecture to fit your organization's needs 

• 24/7 tech support comes standard; advanced support 
options available 

Best For: Midmarket to large enterprises with 100 to 5,000 users 
or more. 

Price: $60.25 per user (1 ,000 users for one year) 



(866) 866-2802 
www.sophos.com 



(866) 866-2802 
www.sophos.com 



(866) 866-2802 
www.sophos.com 
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-State Drives 



BiTMICRO Networks E-Disk Altima Series 




BITMICRO Networks' E-Disk Altima series is designed to offer tlie most advanced solid- 
state drive solution. Powered by BiTIVIICRO's proprietary EDSA (Enhanced Datamover 
and Storage Accelerator) flash I/O controller and LUNETA (Logical Unifier of Extensive 
Transfer Arrays) memory flash interface ASICs, E-Disk Altima SSDs utilize high-density 
flash memory chips to create massive storage capacities in standard disk drive form fac- 
tors. Flash memory-based E-Disk Altima SSDs boost system performance by eliminat- 
ing seek time and latency for faster I/O and sustained transfer rates. BiTIVIICRO's E- 
Disk Altima SSDs are available in 2.5-inch PATA, 2.5-inch SATA, 2.5-inch SCSI Narrow, 
3.5-inch Fibre Channel, and 3.5-inch Ultra320 SCSI interfaces. E-Disk Altima SSDs can 
support demanding enterprise applications with their patented FlashBus technology. 

• Available in a variety of capacities from a few gigabytes up to a terabyte 

• Use BiTMICRO-built SD controllers and accelerators to maximize drive potential 

• Drives can be optionally equipped with PowerGuard, a power management system 
that can perform specific drive functions in the event of a power failure 

• Custom configurations available for customers who require highly specific SSDs 

• Drives are rugged and can withstand demanding conditions 

Best For: Aerospace design, algorithmic trading, data warehousing, nuclear fission 
models, video on demand, and real-time data/feed processing. 



(510) 743-3475 
www.bitmicro.com 



Crucial RealSSD C300 2.5-inch SATA 6Gbps Drive 




With high-speed IVILC NAND, advanced controller technology, optimized NAND man- 
agement, and the new SATA 6Gbps interface, the Crucial RealSSD C300 is designed to 
deliver the latest innovations in solid-state storage to servers and workstations. The 
RealSSD C300 leverages Crucial's expertise in NAND process technology to optimize 
the performance and reliability of its solid-state storage devices. 

• 4,000 random read I/Ops, up to 60,000 

• SATA 6Gbps interface with Native Command Queuing to improve throughput and 
eliminate interface bottleneck 

• Fully implemented ATA-8 with Trim to improve data transfer speeds 

• Self-Monitoring Analysis and Reporting Technology command support 

Best For: Storage needs where throughput performance, reliability, and quality 
are paramount. 

Price: $399.99 (128GB) or $699.99 (256GB) 



(800) 336-8915 
www.crucial.com 



Intel X25-E Extreme SATA Solid-State Drive 




The Intel X25-E Extreme SATA Solid-State Drive, based on SLC (single-level cell) 
NAND memory, is designed for maximum I/Ops performance to accelerate data center 
responsiveness. Typical enterprise uses include replacing 15,000rpm HDDs in Tier 
and Tier 1 storage applications in an effort to dramatically accelerate performance, 
lower power consumption, and reduce total cost of ownership. Intel's X25-E Extreme 
SATA SSD technology is designed to help change the economics of enterprise data 
centers by increasing server, workstation, and storage system performance by lOOx 
compared to hard drives as measured in I/Ops. Intel's X25-E Extreme can also add a 
level of predictability through the use of SMART technology to help predetermine when 
to swap drives. 

• 14,000 read I/Ops per watt 

• Designed to lower the total cost of ownership for enterprise server and storage appli- 
cations by more than five times compared to traditional spinning hard disk drives 

• Storage model designed to lower energy costs by up to 5x 

• Key architectural designs such as 10-channel NAND architecture with Native 
Com-mand Queuing, proprietary controller, and firmware efficient in advanced 
wear-leveling and low write amplification 

Best For: Enhancing enterprise data center responsiveness. 



(408) 765-8080 
www.intel.com 



Intel X25-M Mainstream SATA Solid-State Drive 




The Intel X25-M Mainstream SATA Solid-State Drive is a versatile SSD designed to 
meet corporate client requirements for notebooks. Additionally, the X25-M drives pro- 
vide the performance and capacity to meet the needs of SME and corporate data center 
requirements for running read-intensive applications. 

Featuring an SSD on 34nm NAND flash memory manufacturing process, the X25-M is 
designed to provide responsive, lightweight, low-power, and fast-booting benefits of 
SSDs at a more affordable price. Delivering up to 6,600 4KB write I/Ops and up to 
35,000 read I/Ops, the X25-M is designed to outpace other SSDs while significantly out- 
performing HDDs, providing faster system and application responsiveness. 

• Up to 6,600 4KB write I/Ops and 35,000 4KB read I/Ops 

• Designed to offer a 56% improvement in system responsiveness compared to a 
5,400rpm HDD 

• Advanced algorithms and SSD utilities from Intel, including the Intel SSD Toolbox, 
which helps SSDs retain their out-of-box performance, and the Intel SSD Optimizer 
that supports the Trim command in Microsoft's Windows 7 operating system 

Best For: Read-intensive applications for SMEs and corporate data centers. 



(408) 765-8080 
www.intel.com 
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Fusion-io ioDrive 



If 




Although it's technically not an SSD, the ioDrive from Fusion-io features solid-state 
storage technology designed to provide low latency, better application performance, 
increased bandwidth, and a simpler IT infrastructure. It also uses block storage-type 
management. The ioDrive has a write bandwidth of between 490 and 670IVIbps and 
read bandwidth of between 700 and 750Mbps, depending on the capacity, and it also 
features up to 93,199 4KB write I/Ops and 1 19,790 4KB read I/Ops. 

• Low-profile PCI Express x4 form factor 

• Weighs less than 2 ounces 

• Available in capacities of 80GB, 160GB, and 320GB 

• Supports IVIicrosoft Windows 64-bit XP, Vista, Server 2003, and Server 2008 as well 
as RHEL 4 and 5, SLES 1 and 1 1 , and OEL v4 and 5 



Fusion-io ioDrive Duo 




The Fusion-io ioDrive Duo offers the same technology and functionality as the ioDrive 
but with twice the performance and capacity. It has read and write bandwidth up to 
1 .SGbps and 1 .4Gbps, respectively, and has up to 129,699 4KB write I/Ops and 
185,022 4KB read I/Ops. 

• Full-height, half-length PCI Express 2.0 x4 or PCI Express x8 form factor 

• Weighs less than 1 ounces 

• Capacities of 320GB and 640GB 

• Supports IVIicrosoft Windows 64-bit XP, Vista, Server 2003, and Sen/er 2008 as well 
as RHEL 4 and 5, SLES 1 and 1 1 , and OEL v4 and 5 

Best For: Enterprises and vertical markets such as Web 2.0 and social media imple- 



Best For: Enterprises and vertical markets such as Web 2.0 and social media imple- 
mentations; banking and finance; and government, academic, or medical research. 


mentations; banking and finance; and government, academic, or medical research. 


(801) 424-5500 
www.fusionio.com 


(801)424-5500 
www.fusionio.com 



Samsung 2.5-Inch Enterprise SSDs 




Samsung's 2.5-Inch Enterprise SSDs offer 3Gbps SATA storage that enables highly 
reliable 24/7 performance in data centers and other server environments. Designed 
to provide a significantly higher degree of reliability than 15K SAS and Fibre Chan- 
nel HDDs with dramatically reduced power requirements, these enterprise SSDs are 
performance-optimized SLC NAND-based storage devices. They're also designed to 
offer the highest performance in real-world enterprise workloads compared to tradi- 
tional enterprise-class hard drives, and they consume 20% less power than a typical 
enterprise HDD. Average I/Ops speeds are 30,000/7,000 read/write I/Ops compared 
to 570 I/Ops for a 15,000rpm SAS HDD, and I/Ops per watt is about 22,000/17,000 
read/write vs. 70 for a comparable HDD. 

• Improved performance 

• Higher reliability 

• Better energy efficiency 

• Improved total cost of ownership 

Best For: A range of I/O applications such as video on demand, Web serving, 
virtualization, and OLTP. 



Solid Access Universal Solid State Disk Series 




Solid Access' series of USSD (Universal Solid State Disk) drives are designed to reduce 
bottlenecks caused by high read/write traffic. A low-capacity USSD 200 appliance pro- 
vides instant gains for OLTP applications suffering degradation because of high-volume 
traffic in tempdb, log files, indexes, and frequently accessed tables as well as entire 
high-performance databases. 

The available drives in the USSD series are the USSD 200 for l/O-dense file traffic (16 
to 128GB, 2U rackmount), USSD 315 (integrates sen/er and SSD), USSD 310 for high- 
capacity density requirements (up to 256GB, 1U), and USSD 320 for interface expan- 
sion for high-volume data ingest requirements (up to 256GB, 2U). The units can also 
integrate with SAN switches to create larger storage volumes. 

• Fast storage 

• Instant application acceleration 

• Requires no training, tuning, or periodic maintenance 

Best For: OLTP applications with heavy traffic and high-performance databases. 
Price: Entry-level pricing less than $10,000 



(408) 544-4000 
www.samsung.com 



(603) 760-2831 
www.solidaccess.com 
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Cloud Storage 
Specialists 

Nirvanix Works Hard To Ensure That Companies 
Have Secure, Fast Access To Their Hosted Storage 



by Holly Dolezalek 
■ ■ ■ 

Storage has always presented a 
dilemma for IT managers: You can have 
cheap or accessible, but not both. 
Cheaper options such as tape offer barri- 
ers to access; more accessible methods 
don't come cheap. But as with many 
other functions, organizations are start- 
ing to be interested in how moving to the 
cloud might offer some savings and 
accessibility. Nirvanix hopes to capital- 
ize on that interest. 

Nirvanix (www.nirvanix.com) is a 
cloud storage company based in San 
Diego. Formed in 2007, the company has 
about 36 employees, most in the head- 
quarters in San Diego and the rest in sales 
teams in Los Angeles, Cincinnati, 
Boston, and New York. Each sales team 
includes a direct salesperson, an account 
executive, and a solutions engineer who 
works with customers to figure out where 
cloud solutions in storage might fit in 
their infrastructures. 

Cloud Offerings 

The company's SDN (Storage Deliv- 
ery Network) is a cloud storage service 
based on five nodes in Los Angeles; 
Houston; New Jersey; Frankfurt, Ger- 
many; and Tokyo. "The way it works is 
that customers get access via API to the 

Nirvanix 



(619) 764-5650 
www.nirvanix.com 

• Nirvanix specializes in providing compa- 
nies with cloud-based storage solutions. 

• The company's Storage Delivery Net- 
work offers a secure hosted storage 
environment that is easily managed with 
its CloudNAS software. 

• "[The CloudNAS software] allows stan- 
dards-based access so that organizations 
don't have to make extensive modifica- 
tions — they just point their existing appli- 
cations or hardware to the gateway and 
use our cloud storage," says Adrian 
Herrera, Nirvanix's director of marketing. 



network, and we support policy-based 
storage," says Adrian Herrera, director of 
marketing for Nirvanix. "So customers 
can specify which location they want 
their storage to go to or choose any num- 
ber of nodes or just use our proprietary 
technology to figure out the best location 
for them." 

Users of the SDN can also get Nir- 
vanix's management portal, a Web-based 
tool that shows and reports on usage, 
billing, metering, and other factors. 



Nirvanix also has an application called 
CloudNAS. Customers get the software free 
once they sign on with Nirvanix, and 
it acts as a gateway or interface to the 
SDN. "CloudNAS turns any Linux or 
Windows server into a gateway to our 
SDN," Herrera explains. "It allows stan- 
dards-based access so that organizations 
don't have to make extensive modifications. 



in its capabilities is limited. "A lot of peo- 
ple say that large organizations aren't 
using cloud storage," Hen^era says. "They 
are definitely using it. It isn't a mass mar- 
ket, but it's there." 

Before, Herrera says, the common con- 
cern with cloud services was security — a 
concern that is frequently addressed by 
cloud providers. Herrera says the latest 



Users of the Storage Delivery Network 
can also get Nirvanix's management 
portal, a Web-based tool that shows 
and reports on usage, billing, metering, 
and other factors. 



they just point their existing applications 
or hardware to the gateway and use our 
cloud storage." 

The company also offers professional 
services so that they can help customers 
figure out their cloud strategy or give 
guidance in integrating Nirvanix's API. 
But the majority, as much as 95%, of the 
company's revenue comes from sales of 
the SDN. 

Selling The Cloud 

Nirvanix's primary target is the For- 
tune 1000 company, but it serves its share 
of small companies, mostly through part- 
ners such as Cobalt and Symbana. For the 
most part, Herrera says, these companies 
are looking for offsite data protection for 
their disaster recovery plans. "When your 
speed is dependent on your bandwidth 
and you're going over the public Inter- 
net with a lot of data, daily backups 
aren't that easy to do," he explains. "But 
the cloud is good for archiving for small- 
er companies." 

Altogether, Nirvanix has about 700 cus- 
tomers, which is a combination of cus- 
tomers that sign up directly for the service 
and large customers that provide the ser- 
vice to their own customers. Most of the 
company's business comes from large 
customers. Of all Nirvanix customers, 
about 35 to 40 are international. 

Most of the company's sales, 80 to 
90%, come from direct sales, although 
Nirvanix started developing its channel 
partners late last year. "We've got about 
10 resellers right now because we're 
really selective about who we sign on," 
Herrera says. 

Breaking Through 

Nirvanix, like other cloud service pro- 
viders, faces an uphill battle in explaining 
the value of its service. Although interest 
in the cloud remains high, sometimes trust 



concern is with total cost of ownership, 
and Nirvanix has had to get better at 
explaining the realities of TCO related to 
cloud storage. Part of the difficulty is cus- 
tomers' desire to make comparisons that 
they think are apples-to-apples but are 
anything but, Herrera explains. 

"A lot of people like to boil it down to 
the lowest common denominator, so they 
compare going to the cloud to purchasing 



a hard drive, instead of including every- 
thing involved with managing storage," 
Herrera says. "So they look at dollars per 
gig and say, hey, I can buy a JBOD or a 
VPL for X cents per gig, but you cost 25 
cents per gig. But they're not factoring in 
the power requirements, data center space, 
management, software, or the cost of new 
media down the line. They're also leaving 
out the values of cloud, in that it offers 
access to a global network and can opti- 
mize workflows and make offsite storage 
pools unnecessary because you can store 
in different locations." 

New Developments 

Nirvanix has begun offering a service 
that could be described as a hybrid man- 
aged node. It's a cloud storage node that 
Nirvanix installs in a few racks in the cus- 
tomer' s data center and that runs Nir- 
vanix's software. The company manages 
that node for the customer, including 
upgrades and expansions. 

Some of Nirvanix's customers use this 
node as a replacement for FTP sites or 
other databases that aren't sufficient for 
the volume of content that needs to move 
on them. Interactive ad agencies that 
need to transfer large files to partners 
might use the storage node for that pur- 
pose, simply granting access to those 
partners. One customer, a networking 
company, uses it to store log files for cus- 
tomer support issues so that if one con- 
tact center has to pass an issue on to 
another center, the second center can 
access the log files on the storage site 
instead of using an FTP site. 

"We're seeing a lot of momentum with 
that approach, because for some larger 
organizations, the storage decision is nei- 
ther [a] public nor private decision but 
kind of both," Herrera explains. "Depend- 
ing on the customer's compliance or busi- 
ness needs, they can have different policies 
for data, in that some has to stay inside 
the four walls, some can be on one applica- 
tion server, and some can be stored ex- 
ternally. This solution solves those issues 
for organizations." 




nirvanix 



TM 



Nirvanix's Cloud Offerings 



CloudNAS 



I 



Nirvanix 
l\/lanagement 
Portal 



Storage Delivery 
Network 



Free software component that turns any server on 
your network into a gateway for Nin/anix's Storage 
Delivery Network for fast, easy, and secure access 
to cloud-based storage. 



Offers instant visibility into your cloud storage 
usage for granular control and modification of 
storage and bandwidth. 



Provides managed cloud storage services through 
a network of five nodes that feature security mea- 
sures such as automatic intrusion detection and 
monitoring, SSL support for data to and from the 
SDN, encryption support for data uploads, and 
password authentication. 
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STORAGE 



THREE QUESTIONS 



Solutions For 
A Virtual World 

PHD Virtual Simplifies Backing Up 
& Restoring Virtual Machines 



by Daniel P. Dern 

Headquartered in Philadelphia, PHD 
Virtual Technologies (www.phdvirtual 
.com) offers data protection and data 
recovery for virtual machines through its 
flagship product PHD Virtual Backup 
(formerly esXpress 4.0). 

PHD Virtual currently has more than 
2,000 customers worldwide, and more than 
30% of its sales come from outside the 
United States; its customers include EDS 
(now part of HP), IBM, and the U.S. Coast 
Guard. Thomas Charlton is PHD's chair- 
man and chief executive officer, and Jim 
Schrand is the company's director of prod- 
uct management. 

■ What are the biggest IT-related 
issues facing today's small to mid- 
sized enterprise? 

"Virtualization in general," Charlton says. 
"As organizations scale their use of virtual- 
ization, the larger legacy backup vendors 
whose solutions are designed for a physical 



world are having trouble adapting to work 
with virtualization technologies and virtual- 
ized environments. Oper- 
ationally, backup prod- 
ucts on external devices 
can have trouble meet- 
ing the backup window, 
and agent-based backup 
approaches can be ex- 
pensive and be laborious 
to set up for each VM," 
he explains. 

"Customers are there- 
fore caught in the middle," Charlton says. 
"They don't want to lose or significantly 
decrease virtualization' s cost savings by 
needing to spend more for additional 
backup hardware." 

■ What should Processor readers know 
about your company's products? 

"[PHD Virtual Backup] is used in small- 
er-sized organizations as well as large 
enterprises," says Charlton. "Our esXpress 
software is purpose-built for virtualized 



environments, [and version] 4.0 lets you 
do autonomous, fault-tolerant backup and 
restoration of an entire virtual environ- 

I ment in less time and at lower cost. And 
we support full, full delta, incremental, 
and deduplicated backups." 

"We run as a small virtual machine 
under the hypervisor, alongside the VMs 
to be backed up," Schrand adds. "When a 
backup needs to be run, we spawn a 
Virtual Backup Appliance, [or] VBA, 
VM that runs alongside the other VMs. 

I This means less impact on server perfor- 
mance and greater reliability compared to 
agent-based solutions that run in the host 
service. The VBA process goes away 
when done, freeing up resources. We can 



scale the number of VBAs up to 16 on a 
host and up to 16 simultaneous streams 
of data to a backup storage target. That 
means faster backups and scalability to 
still meet backup windows as your envi- 
ronment grows." 

"Our product family, PHD Virtual 
Backup, is a cross-platform solution, sup- 
porting the leading hypervisors," says 
Charlton. "We support VMware Server, 
VMware's View desktop virtualization 
product, and XenDesktop and will be 



coming out with PHD Virtual Backup for 
Citrix XenServer by September 2010. And 
we are planning to also support Microsoft 
Hyper-V and Oracle VM Server." 

On the restore side, PHD Virtual Backup/ 
esXpress supports data verification at the 
target and self-healing of data on the tar- 
get. "And we have a self-restore capabili- 
ty — you don't need an esXpress license to 
restore your data to another machine," says 
Schrand. "Plus we also allow instant file- 
level restore, [so] you don't have to restore 
an entire VM image." 

■ What makes your company unique? 

"Our focus is on virtualization backup," 
Charlton says. "We were the first to market 
with a backup solution 
for VMware ESX and 
we will continue to lead 

TM 

the market with solutions 
for hypervisor players 
like Citrix XenServer, 
Oracle VM Server, and 
Microsoft Hyper-V. We 
offer global source-side 
deduplication, dedupli- 
cating before we send to 
the backup target." 

Also, says Charlton, "We are a fully 
U.S. -based organization, with develop- 
ment here as well as all other departments, 
although we have a very strong interna- 
tional presence through our partners. And 
although PHD Virtual is a small firm, 
we're owned by a large private equity 
firm. Insight Venture Partners — this can 
be important to companies looking at 
longevity and financial strength regarding 
what vendors to go with." 
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FEATURED PRODUCT 



Instant Server Recovery 

CMS Products BounceBack Serve 
Keeps You Up & Running 



by Kris Glaser Bmmbila 

Server downtime can be a serious issue 
if you don't have the right tools to help 
you get back on your feet. BounceBack 
Server from CMS Products can save your 
organization precious time by backing up 
your entire Windows server on an external 
eSATA or USB drive. 

"Given that almost everything in a 
small business is handled through its 
computer system, [including] inventory 
records, point-of-sale transactions, 
accounting data, customer data, etc., hav- 
ing that system unavailable for use can 
have a very damaging effect on a business 
in terms of lost revenue and negative 
impact on their customers," says Gary 
Streuter, vice president of marketing at 
CMS Products. 



CMS Products 
BounceBack Server 



(800)327-5773 
www.cmsproducts.com 

Instant, one-button recovery to an external eSATA 
or USB drive to help avoid lengthy downtimes. 
$285 (download); $295 (CD/box); ABS-Server 
backup systems start at $399 
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Restan Your Server 

From YourExtemaf eSATA/USB Hard Dnve 
I "An Indusir/ Firsl " 



The BounceBack Server software, 
which you can purchase individually or 
installed on an ABS-Server drive with 
capacities ranging from 1TB to 4TB, 
offers a range of backup and restore 
options to fit the needs of any organiza- 
tion. For starters, the Instant Server 
Recovery option immediately restarts 
your server from your external backup 
drive. Instant Server Recovery "provides 
small-business users with the opportuni- 
ty to keep their Windows Server business 
system up and running in the event of a 
hard drive failure," Streuter says. 

With BounceBack Server, you can 
recover your entire server to its last 
backed up state with One Button Recov- 
ery or use the QuickRestore tool to rein- 
state individual files and folders. You can 
customize which data you want to back 
up, choose multiple backup destinations, 
encrypt with 256-bit AES encryption, or 
store your server information on a local 
or mapped network drive. BounceBack 
Server also lets you schedule a date and 
time to perform an automatic, unattend- 
ed backup. 



DiSKEEPER Disk Performance Analyzer 
For Networks 3.0 



NEW PRODUCT 



by Kris Glaser Brambila 



Detect Fragmentation On Network Drives 



A NETWORK COMPOSED of computers 
filled with fragmentation can mean slug- 
gish and unreliable operation, not to 
mention huge consequences when it's 
time to defragment. 

« d □ 6 Q 



Diskeeper Disk Performance Analyzer 
for Networks 3.0 

A free utility that helps systems administrators detect 
potential performance loss caused by fragmentation on 
their networked systems. 

Diskeeper Corporation Disk Perfor- 
mance Analyzer for Networks 3.0 is a 
free utility that detects the level of frag- 
mentation on your networked systems 
and offers detailed reports for system 
administrators. Once the report is evaluat- 
ed, administrators can utilize Diskeeper® 
performance software to clean up their 



Diskeeper 

corporation ■ 



networks by preventing fragmentation 
before it even occurs. 

"The main feature is the abihty to gener- 
ate a report of the amount of fragmentation 
on all computers, regardless of whether the 
computers are running Diskeeper or not," 
says Mark Harrer, systems engineer at 
Diskeeper. The report issued by Disk 
Performance Analyzer includes informa- 
tion about low-performing fragments, low- 
performing free space, performance gains 
because of defragmenting, and more. 

Harrer says Disk Performance Ana- 
lyzer is ideal for businesses of all sizes 
because it provides critical information 
about how fragmentation affects the per- 
formance of a computer and the network. 

The Diskeeper utility's ability to exam- 
ine hard disk performance across the net- 
work sets it apart from other offerings. 
"A hard drive is a mechanical device, 
which is subject to failure and also the 
biggest performance bottleneck on a 
computer system," says Harrer. Disk 
Performance Analyzer addresses this 
issue by reporting significant information 
about disk performance in relation to 
fragmentation. "From this analysis, one 
can determine how fragmented an indi- 
vidual drive or volume is as well as what 
the fragmentation issues may be." 



(800) 829-6468 
www.dlskeeper.com 
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Expect Big Increase 
In Hard Drive 
Shipments, IDC Says 



SECURITY 




The hard drive market will experience signifi- 
cant growth in the next four years, according 
to predictions released in IDC's Worldwide 
Hard Disl< Drive 2010-2014 Forecast. 
Opportunities in the enterprise hard drive 
market are expected to expand, with sales 
rising above 2009 levels. According to IDC, 
40.5 million hard drives were shipped in 
2009. The research group anticipates unit 
shipments will grow 5.4% annually, and, by 
2014, about 52.6 million hard drives are 
expected to ship. Not only will unit shipments 
increase, but the amount of available storage 
on such hard drives will grow, too. 

According to IDC's John Rydning, research 
director of hard disk drives, the market 
changed last year with hard drive form factors 
that will address enterprise hardware needs 
today and in the future. Rydning says that for 
enterprise applications, more than 17.5 mil- 
lion terabytes were shipped worldwide last 
year. IDC expects this amount to grow at a 
44% CAGR between 2009 and 2014. 

"IVIore terabytes will ship into enterprise appli- 
cations over the next two years than the HDD 
industry shipped into data centers over the 
past 20 years," Rydning says. If IDC's fore- 
cast proves accurate, about 108 million tera- 
bytes will be shipped in 2014. And, as far as 
price per gigabyte for performance-optimized 
HDD storage, the company expects this fig- 
ure to decline 25 to 30% each year. 

HDD Capacity Boost 

Rydning says that enterprise applications will 
consist of capacity-optimized hard drives 
rather than traditional enterprise-class hard 
drives. Although this transition may take 
some time, IDC's expectation is a far cry from 
the hard drive sales/shipments in 2009 — a 
year in which hard drive OEIVIs worked 
through the recession and fought the popular- 
ity of solid-state drives. Rydning cautions, 
though, that cost-cutting measures, such as 
making current solutions more efficient, are 
still important in the enterprise. 

According to Rydning, the significance of this 
forecast is the considerable volume of ter- 
abytes the hard drive industry will be shipping 
into enterprise data centers during the next 
five years. "Some of this capacity replaces 
old, existing installed storage capacity, but 
much of it is new storage capacity," he says. 
"There will always be a focus on the cost of 
acquiring storage hardware. The real chal- 
lenge will lie more with the cost of ongoing 
storage management." 

by Antona Beckman 



CASE STUDY 



A Single 
Point Of Entry 

TriCipher's myOneLogin Lets Students 
Log In To Google Apps Privately & Securely 



by Robyn Weisman 

St. Michael's RC School is a co-ed 
"Specialist School" for science in London. 
It teaches all subjects required for its 800 
students, aged 11 through 16, to continue 
on to college, and its forte is in applied 
learning. "The students learn by doing 
rather than from a textbook," says Damien 
Kelly, head of e-learning at St. Michael's. 

About two years ago, the school migrat- 
ed to Google Apps for its school work- 
flow. In the past, students would complete 
work on Microsoft Word or Open Office, 
save it, print it, bring it to school, give it to 
the teacher, and then wait for the teacher 



the school's network or having to write 
specialized scripts, both of which he want- 
ed to avoid. "We don't want to be distract- 
ed by having another layer of [technology] 
that would distract us from our primary 
goal, which is to provide education," 
Kelly says. "We wanted something we 
could click and go to straight away." 

In contrast, myOneLogin was simple, 
not just in the way it meshed seamlessly 
with Google Apps but also in its flexibil- 
ity of entry. The myOneLogin registration 
process is straightforward, Kelly explains. 
When a student clicks the hyperlink on 
St. Michael's Web site to access Goo- 
gle Apps, they are sent to myOneLogin 
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to mark it up. During this process, Kelly 
points out, too many glitches were possi- 
ble — students could lose the flash drive 
carrying the homework, students often had 
to hold up their progression waiting for 
teachers' annotations, and those annota- 
tions could get lost in transit. 

With Google Apps, students now can 
seamlessly share their work with teachers 
and fellow students by accessing it all 
through the cloud. When a student finishes 
his or her homework, the teacher is alerted 
and can respond with the type of flexibili- 
ty that facilitates learning. 

Google Apps, however, had one major 
flaw that kept it from being a complete 
solution for the school. "It had only one 
level of access — one password — and then 
you were straight in," Kelly says. It 
couldn't handle confidential information, 
such as that of a student's learning dis- 
ability, so that the student's teacher could 
be informed of it in a confidential fashion. 
"We needed to find an easy way to add 
another layer that would be simple for the 
school to use without the complexity of 
having additional servers in the school or 
having to pay for the expertise to set it 
up," he says. 

After looking at several potential solu- 
tions, Kelly came across myOneLogin by 
online identity services provider TriCipher 
(www.myonelogin.com). "The biggest 
thing with myOneLogin is its simplicity," 
says Kelly. "It takes a click of a button to 
integrate into Google Apps, and then it 
just physically works." 

The Right Solution For Students 

The initial solutions Kelly checked out 
required either adding physical servers to 



instead. If they aren't registered, my- 
OneLogin tells them to register by input- 
ting the same username and password they 
use with Google Apps. myOneLogin then 
integrates the two together and asks for 
additional information. Although some of 
St. Michael's staff provides VeriSign VIP 
(Virtual IP) mobile access information, 
which allows for one-time passwords on 
mobile devices, most teachers and all stu- 
dents select three questions and give three 
responses that they can remember to con- 
firm their identities. 

This setup has worked well because 
even though St. Michael's students are 
intelligent and motivated, they're still 
between the ages of 11 and 16, with many 
more things on their minds than pass- 
words. "Everyone forgets that if you have 
a large number of people working at an 
organization or students, a lot [of the 
time], they're going to forget passwords," 
says Kelly. The question-and-response 
option is a more reasonable and less time- 
consuming option for everyone. 

myOneLogin is successful because it 
allows individual students and teachers to 
log in directly, using the same username 
and password that they were already using 
for Google Apps, even though Kelly's 
small IT staff could have done so them- 
selves ahead of time. "We decided it 
would reduce our workload if we got them 
to do it themselves, and for the students, it 
would provide a great educational under- 
standing that this extra layer was giving 
them more security and making it less 
easy for other students to log on to their 
accounts," Kelly says. 

In addition to its ease of use, my- 
OneLogin also provides St. Michael's 



with secure SAML (Security Assertion 
Markup Language)-based integration with 
Google Apps as well as TAGS (TriCipher 
Armored Credential System), an authenti- 
cation system that lets the school deploy 
and administer different sorts of creden- 
tials from a single infrastructure. 

Ease In Testing & Implementation 

St. Michael's has used myOneLogin 
for several months and has yet to experi- 
ence any downtime, connection prob- 
lems, or other issues. But before it 
deployed myOneLogin across the entire 
school, Kelly conducted a trial using a 
selection of students and staff to test 
it out. "myOneLogin offers a trial thing 
so that particular students and teachers 
who are registered must go through 
myOneLogin, while the rest can carry on 
using [Google Apps] in the way that they 
have," Kelly says. 

According to Kelly, the trial spanned a 
month without a single hitch. "Then we 
clicked a button and said, 'Now, everyone 
has to register to use Google Apps.' 
Students and staff knew that on a particu- 
lar date, they would have to register to 
access Google Apps. It was as simple as 
that," he says. As for technical issues, 
Kelly says that he has yet to need any 
technical support from TriCipher. "Really, 
to integrate [myOneLogin] and make it 
work is so simple, you can do it in your 
sleep," he says. 

What's more, myOneLogin is free for 
educational institutions using Google 
Apps. Kelly says he was not aware of this 
minor bonus until after he had chosen 
myOneLogin over competing solutions. 
"When we were looking for a solution, we 
decided we wanted the best solution for 
the school, not just a free solution," he 
says. "But because it is so good, in the 
future, when we want to use it with differ- 
ent companies or applications, we will 
only use myOneLogin because it makes 
sense to use one system where once 
you've logged in, you then click to which 
organization you want to connect to, and 
you just connect." 



TriCipher myOneLogin 



A cloud-based authentication solution that 
provides triple-strength security when log- 
ging in to applications while at the same 
time offering multiple means from which to 
access these applications. 

'The biggest thing with myOneLogin is its 
simplicity. It takes a click of a button to 
integrate into Google Apps, and then it just 
physically works," says Damien Kelly, 
head of e-learning at St. Michael's RC 
School in London. 

(650) 376-8326 | www.myonelogin.com 
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FEATURED PRODUCT 



Flexibility & 
Spot Security 

NetClarity's NACwalls Protect End Points 
& Block Access To Valuable Data 



by John Brandon 

For a smaller company, managing secu- 
rity is not easy. Without the vast resources 
of a large enterprise — including dedicated 
security personnel and extensive finan- 
cial backing — it can be difficult to pro- 
tect every end point, every router and 
switch, and every possible port from 
Internet attacks or a hacker running 
scripts out in the parking lot. Net- 
Clarity's NACwall line of products, 
including one that is particularly well- 
suited to a smaller company trying to 
protect corporate assets, is well-suited 
to protecting sensitive business docu- 
ments, financial systems, and applica- 
tion data stores. 

The Micro NACwall costs less than 
$ 1 ,000 but provides a unique blend of enter- 
prise-class security services. For an SME, 
the key benefit is flexibility. The portable 
device can be installed in retail locations to 
control access to routers and switches used 
at a branch office or even installed at the 
home offices of teleworkers and executives 
to provide security when those employees 
connect to corporate LANs. 

"Micro NACwall is a low-heat, low- 
power portable appliance to protect a net- 
work of 10 users to keep criminals off of 
your network," says Gary Miliefsky, presi- 
dent and CTO of NetClarity (www.net 
clarity.net). "The moment it detects access, 
it will block the intrusion and alert you to 
the new danger." 

Miliefsky says attacks are on the rise and 
companies should become more educated 
about new exploits. He suggests visiting 
www.privacyrights.org/ar/ChronData 
Breaches.htm for the latest information 
about companies that have been attacked 
and explanations of how the hackers broke 
in. One recent example, he says, was in a 
hospital where doctors were using PDAs 
and laptops with wireless access. Hack- 
ers spoofed one of the devices and were 
able to download patient data. Another 
resource is Cybercrime.gov, where recent 
exploits are also listed with explanations of 
the attacks. 

Security Challenges 

In an age where Internet hacking runs 
rampant and criminals can freely download 

NetClarity Micro 
NACwall Features 

• Low-power, low-heat security appliance for 
small data centers 

• Detects and stops intrusions within 1 0ms 
and sends email alerts 

• Does not require any client software to 
be installed for protecting data 

• Works well with existing networks, routers, 
and switches without need for upgrade 



Linux programs that are capable of breaking 
wireless security encryption and can install 
malware on the laptops of unsuspecting 
employees, the Micro NACwall goes 
well beyond the basic firewall protection 




NetClarity offers three iterations of the NACwail— Micro, Branch, 
and Enterprise— to serve companies of all sizes. 



The competition for the NACwall prod- 
ucts is intense; some ambitious data center 
managers have figured out how to build 
custom firewalls and use open-source soft- 
ware to build security infrastructures. Yet, 
these techniques often require a seri- 
ous investment in time. The NACwall 
products, conversely, are much easier 
to install and configure, taking just a 
few minutes. NetClarity also offers an 
enterprise-level appliance called the 
Enterprise NACwall that has even bet- 
ter performance and a software suite 
that allows managers to see how the 
network is protected. 

Changing Landscape 



NACwall products to improve the quaran- 
tine engine, which detects intrusion and 
then reroutes that IP address to a dead end 
that cannot be used to damage corporate 
data, and will also improve performance in 
the products. NetClarity is also well-known 
as an OEM partner and plans to expand that 
side of the business, creating interfaces that 
can be used with third-party switches from 
companies such as Cisco. Miliefsky says 
the company is also focused on intellectual 
property for licensing the technology. 

Security challenges exist for companies 
of all sizes, and the best plans can be 
thwarted by a dedicated hacker with a new 
technique. The NACwall products are 
designed to not just scan for intrusion 
attempts or block certain kinds of attacks 
but can scan for all suspicious activity, giv- 
ing data center managers peace of mind and 
a new level of security protection. 

NetClarity 
Micro NACwall 
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of a router that may not be properly patched 
and capable of interpreting a new hack- 
ing technique. 

For example, Miliefsky explains how in a 
small retail store, a hacker can spoof the 
barcode reader used for managing product 
inventory, replicate an IP address that looks 
valid, and then start stealing data. Or, 
inside a data center or small server room, 
anyone who has access — such as the build- 
ing cleaning crew or a consultant — can easily 



Security is constantly changing, and 
hackers devise brand-new methods of steal- 
ing data seemingly on a weekly basis. 
Miliefsky says his company plans to keep 
improving the Micro NACwall and Branch 



(800) 874-2133 
www.netclarity.net 

Description: Portable security appliance for 
detecting attacks and blocking access to 
routers and switches in a small data center 
or server room, home office, or retail shop. 

Interesting Fact: The Micro NACwall can 
detect and stop an intrusion within 10ms and 
send an immediate alert to IT staff by email 
or phone. 




NetClarity 

PREEMPTIVE, PROACTIVE PROTECTION 



break into servers, but the Micro NACwall 
scans for any suspicious activity and can 
block access within 10ms. The device is 
easy to set up and configure, does not add 
a great amount of network load (as often 
happens with enterprise-class appliances), 
and can send an email alert if an intrusion 
is detected. 

"This is a micro unit that can be plugged 
directly into a wireless network," says 
Miliefsky, who explains that the device 
is geared toward retail stores, home 
offices, and inside small data centers to 
provide flexibility in deployment. There 
is no specific chip inside the Micro 
NACwall for processing the firewall rou- 
tines used to block access, so Miliefsky 
recommends upgrading to the Branch 
NACwall for those that need faster perfor- 
mance. The NACwall series of products 
all provide a similar feature set in terms of 
detecting intrusions, but the Branch 
NACwall has a faster CPU and more 
memory, so it has the ability to scan multi- 
ple threats at once and reroute them and 
block access accordingly. 



Attention Data Center Professionals 



Where do you go to find the 
newest products available? 



Check out each issue for 



PRODUCT RELEASES 




Articles with > 
valuable product 
overviews and data, 



< Quick rundowns of all 
data center-related products 
released in the past week, 



Marketplace 
ads filled 
in-depth 



new products. 



. . . then go to Processor.com and take 
advantage of our online search tools to find 
even more in-depth information! 
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I Google Estimates A $54 Billion 
Impact On U.S. Economy 

Google helped generate $54 billion for the U.S. 
economy last year, according to a study re- 
leased by the company. The Internet search ser- 
vice, along with Google-sponsored advertising, 
helped generate profit for many U.S. business- 
es, including Web site publishers and nonprofit 
organizations. In the report, the company de- 
tails each state's economic activity generated 
by Google. California, New York, Florida, 
Illinois, and Texas make up the top five states 
that benefited most in 2009. Google calculated 
its economic impact using estimated figures of 
revenue made by advertisers, the value of free 
ad space given to nonprofits, and money paid 
to users of the Google AdSense product. 

I More Households 
Mobile-Phone-Only 

Data from the Centers 
For Disease Control 
shows that 24.5% of 
U.S. households rely 
on a wireless phone 
only and do not sub- 
scribe to landline- 
based phone services. 
The CDC also shows 
that about 52 million 
adults (22.9%) live in households with only 
wireless phones. This represents a 4.3% 
increase compared to the last half of 2008; 
the numbers from 2008 showed a 4.4% 
increase compared to 2007. About 1 5% of 
households that had a landline also used a 
mobile phone a majority of the time. The 
CDC also reports that about 2% of house- 
holds have no telephone service of any kind. 

I Telepresence Users 
Have Favorable Experience 

Telepresence, or high-def videoconferencing 
that lets remote users feel as though they 
are speaking to one another in person, is 
popular with the businesses that have used 
it. Data from a study by ThelnfoPro, a re- 
search and advisory firm for the IT industry, 
also shows that although about 70% of busi- 
nesses report that they don't plan to use 
telepresence, 60% of those who have used 
the technology say they plan to rely on it 
more and broaden its coverage. About 13% 
of those surveyed say they will test drive 
telepresence by this time next year. Busi- 
nesses that have given telepresence a green 
light say that the primary reason they like it 
is that it saves on travel costs. ThelnfoPro 
also found that 41 % of businesses currently 
use a unified communications system, with 
the remaining portion of the sample saying 
they either plan to roll out a unified communi- 
cations system by the first quarter of 201 1 
(29%) or not at all (29%). 

I ICANN Hires Cryptography Trailblazer 

About six months after departing from the roles 
of vice president, fellow, and chief security offi- 
cer with Sun Microsystems, Whitfield Diffie has 
been tabbed by ICANN as its new vice presi- 
dent of information security and cryptography. 
Along with Martin Hellman, Diffie wrote the 
"New Directions in Cryptography" paper in 
1 976 that's credited with helping develop key 
distribution offering better security via the use 
of a private key exchanged between mutual 
parties before encryption. ICANN states that 
Diffie will provide advice on general security 
matters related to ICANN's mandate and in the 
design, development, and implementation of 
security methods for ICANN-managed net- 
works. Additionally, he will oversee the "contin- 
uous improvement and 'best practices' process 
for information security and cryptography." 
ICANN CEO Rod Beckstrom says Diffie will 
bring "an extraordinary intellect and immense 
professional achievements to ICANN, and his 
appointment reflects my strong commitment to 
improving ICANN's technical security." 



Proactive Counter-Hacking 
Security Solutions 

Identify Risks & Threats, Develop Targeted Defenses 



by Kurt Marko 

IT HAS HISTORICALLY treated security 
like homeowners in a crime-riddled 
neighborhood who add so many dead 
bolts and window bars, their houses look 
like Fort Knox. The armored exterior 
looks safe but provides a false sense of 
security as clever burglars eventually find 
ways around the fortifications. Likewise, 
security professionals now realize that 
passive security measures are of limited 
effectiveness against professional hackers 
and their powerful financial incentives. 
Although "active defense" is a seeming 
oxymoron, as banks learned long ago. 



Key Points 



Proactive security entails identifying 
your most important information assets 
and the security risks for each, gather- 
ing threat intelligence, and designing 
targeted defenses for each. 

Professional cybercriminals are skilled at 
evading conventional security measures, 
so a defense program must include con- 
tinuous, active monitoring of sensitive 
applications, systems, and networks. 

Proactive measures center on people 
and processes; however, security soft- 
ware technologies are emerging that 
can detect threats and adapt their 
defenses in real time. 

A proactive strategy may prevent many 
attacks and render others less effective; 
however, counter-attacking the perpetra- 
tor is illegal cyber-vigilantism in most 
jurisdictions. Even putatively safe realms 
for counter-hacking or clandestine sur- 
veillance — on employees, for example — 
can be legally risky and a violation of 
corporate policies. 



security is more effective when passive 
techniques, such as vaults, are supple- 
mented with active measures such as 
security guards. 

Of course, proactive measures are 
not cheap, can't be fully automated, and 
require research to find your highest risks 
and biggest threats. In addition, some 
techniques, such as white hat or ethical 
hacking, which mirror those of the hack- 
ers you're defending against, can pose 
ethical or legal risk. Yet, according to 
Paul Sop, CTO of Prolexic Technologies 
(www.prolexic.com), a network security 
services firm, anyone doing significant 
business over the Internet must augment 
traditional security techniques with more 
aggressive measures. 

Start With Risk Analysis 

A proactive strategy starts by identify- 
ing your digital crown jewels. According 
to Jeffrey Carr, security consultant and 
author of "Inside Cyber Warfare," "The 
first thing to do is an assessment of what's 
valuable. You clearly can't protect every- 
thing from everybody, so your resources, 
including financial, should be dedicated 



toward protecting the most valuable 
assets." A strategic shift from blanket- 
edge security to targeted defenses is also 
recommended in a report by Deloitte's 
Center for Security and Privacy Solutions: 
"One of the more fruitful approaches to 
consider in addressing the threat of cyber- 
crime involves moving from a primarily 
security-based approach to a more risk- 
based approach." 

Just as physical surveillance is the cor- 
nerstone of real-world security, so, too, 
is proactive monitoring of the IT infra- 
structure a requirement in the cyber 
world. Perhaps Mark Twain put it best 
when he wrote, "Put all your eggs in one 
basket and — watch that basket!" Sop rec- 
ommends enterprises first deploy an 
anomaly detection system that bench- 
marks a network's normal behavior. He 
adds that this is increasingly difficult 
because sophisticated attacks now use 
various tricks to fly under the radar of 
conventional IDS systems. Carr agrees 
that professional attackers take pains to 
act in ways that avoid detection but 
aren't infallible. "Look for things like an 
employee that shouldn't be an adminis- 
trator who now has administrator rights, 
or an employee who would normally be 
accessing a particular file or project a 
few times a week who is now in there an 
hour at a time every day." 

Mount An Informed Defense 

Having established an active monitor- 
ing regime, Carr says the next step is to 
gather intelligence on who might want 
what you have. This often comes down to 
someone looking for a competitive advan- 
tage by stealing intellectual property or 
secret plans. "For example, one of the pri- 
orities in China is the smart grid and 
developing cheap energy," says Carr, so, 
"if you happen to be in that business, then 
you can count on having your valuable 
information targeted by agents who think 
there's a market for what you have." 

Deloitte's report describes intelligence 
gathering as a continuous scouting expe- 
dition using various sources for infor- 
mation about the threat environment. 



whether industry groups such as the vari- 
ous CERTs (computer emergency respon- 
se teams), law enforcement, or security 
vendors. Other techniques include creat- 
ing honeypots to trap probable hackers or 
monitoring hacker forums, although this 
can be tricky because the black hats are 
vigilant in detecting poseurs. 

Next, you'll want to use threat intelli- 
gence to develop an informed defense 
strategy, according to Carr. He likens 
this to a football coach using recordings 
of the opposing team in designing a 
game plan: "Once you know who you're 
dealing with, you can organize an appro- 
priate defense." 

The tactics often entail adding person- 
nel or security services and enhancing 
procedures. "There is no silver bullet," 
says Prolexic's Sop; however, active, 
adaptive technologies are also making 
their way into new security appliances. 
David Koretz, president and CEO of 
Mykonos Software (www.mykonossoft 
ware.com), says there's a gaping hole in 
the typical security measures for Web 
applications. Firewalls and client-side 
scanning only detect attacks after they've 
succeeded, he says. "It's equivalent to 
having a fire alarm after your house 
burns down," he adds. 

Corporate Policies & Counterattacks 

An aggressive security strategy should 
include risk analysis, threat intelligence, and 
an active, adaptive response to attacks, but 
a counterattack is clearly off-limits. "There 
is no right of self-defense," says Carr. "It 
would clearly be an illegal act and the 
Justice Department would be entitled to 
prosecute a U.S. company that engaged in 
attacking another network." As he summa- 
rizes in his book, active counterattacks on 
cyber criminals is the province of govern- 
ments, not individuals or enterprises. 

Even when attacks come from insid- 
ers, hacking the hacker is risky. And the 
question of whether digital employee sur- 
veillance violates the employee's right 
to privacy is also a legal gray area and 
is currently the subject of a Supreme 
Court case, j 



Active Web Application Security Techniques 

Code-level modification and data protection: Security appliances or proxies can inject a layer 
of confusion and misdirection into existing Web applications, making it harder for hackers to intro- 
spect and discover vulnerabilities. 

Identify and track hackers: Pinpoint hackers and security incidents as the attack occurs and 
enable application administrators to track activities over time. 

Gain hacker intelligence: Gain an understanding of hacker behavior using technology that pro- 
files their capabilities, evaluates skill levels, and classifies the threat they pose. 

Establish counter-measures: Once the skills of the hacker are classified, security administrators 
can decide on the appropriate response or counter-measures to deploy in real time. Counter- 
measures can also be defined and executed based on policy. 

Analyze attacks over time: Drawing upon a database of known hacker behaviors and analysis of 
Web application attacks over time, gather intelligence to understand the real exposure and to bet- 
ter anticipate and prioritize responses against future attack scenarios. The more the hacker is 
understood, the better prepared an organization is to deal with future security incidents. 

Source: Mykonos Software 
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Email Account Migration 
In A Hybrid Environment 

Mixing Cloud Email & On-Premises Servers 
Offers Flexibility, But Migrating Data Is Challenging 



by Kurt Marko 

Cloud email, also known as Web mail, is 
the de facto standard for consumers, but the 
major providers are now taking aim at enter- 
prise customers, and the ensuing price war 
has pushed annual subscriptions to as little as 
$30 per user. 

Despite potentially significant cost sav- 
ings, many enterprises are unwilling to make 
the jump to online applications for something 
as critical as email. But there's an incremen- 
tal alternative allowing cautious companies 
to test cloud email while retaining internal 
servers for fastidious power users or security- 
conscious executives. 

This hybrid model, which augments exist- 
ing internal servers with online SaaS email, 
became popular in the last year largely as a 
cost control measure, says Ed Laczynski, 
CTO and founder of the cloud technology 
integrator LTech (www.ltech.com). 

However, as businesses see the increas- 
ing power of cloud-based collaboration 
tools, many are considering moving more 
employees over. Burton analyst Bill Pray 
says tight budgets have forced IT to seg- 
ment its user base, identifying light-use 
candidates for SaaS who just need basic 
email services and don't require a fat client 
tethered to an internal mail server. Despite 
the seemingly best-of-both-worlds appeal, a 
hybrid email architecture comes with inte- 
gration and migration challenges a homo- 
geneous solution doesn't face. 

Hybrid Email Architecture 

The hybrid model is conceptually simple: 
Some employees remain on an internal mes- 
sage server (typically Microsoft Exchange) 
and others move to a hosted email service 
(often also Exchange) or SaaS solution. 
Given the inherent transparency of Internet 
naming and email routing, SaaS users appear 
to have the same mail domain and corporate 
identity as their internal colleagues. 

The primary advantage of a hybrid ap- 
proach is the lower cost of providing email 
accounts via SaaS, where the vendors operate 
on such a scale they can offer rates most IT 
departments, particularly SMEs, can't match. 
Other advantages, according to Info-Tech 
Associate Lead Research Analyst Tim 
Hickemell, include the transfer of operational 
risk to a third party, more robust disaster 
recovery capabilities, and better security. 

Given these benefits, why keep any inter- 
nal systems? The reasons boil down to risk 
mitigation and functional requirements. 



Key Points 



• Hybrid email architectures, in which some 
employees use a cloud service and others 
stay on internal systems, are an increasingly 
popular way of reducing email costs while 
presen/ing the features, control, and security 
needed for certain users and job categories. 

• Hybrid environments aren't static and 
necessitate the ability to move users and 
data bidirectionally between the cloud 
and on-premises systems. Thus, IT must 
transform migrations from an episodic pro- 
ject into a semi-automated process. 

• Email transport is a standard, and users will 
see no difference in sending messages to 
colleagues on either service. But collabora- 
tion features are difficult to integrate across 
environments, although equivalent capabili- 
ties are typically available in the cloud. 



There are two philosophies for segmenting 
email accounts: Make SaaS the default and 
only keep select users in-house or make SaaS 
the exception for transient employees or 
those with limited email needs. 

In the first scenario, Laczynski says the 
primary driver for keeping users on-premises 
is compliance with government regulations. 
Many firms in the financial services, health- 
care, and defense industries (those most 
affected by regulatory regimes) find compli- 
ance with retention and storage requirements 
sufficiently arcane and are not comfortable 
entrusting the responsibility to a third party. 

Overall risk tolerance and advanced feature 
requirements are other reasons Pray says 
companies retain internal email servers. 
Organizations using SaaS only in special situ- 
ations often have many external salespeople, 
part-time workers, or multiple geographically 
dispersed offices, according to Hickemell. 

l\/ligration Issues & Feature Limitations 

Historically, Pray says, email migrations 
have been episodic, major IT projects 
to move large groups of employees from 
one system to another. However, to fully 
exploit a hybrid environment, he says, 
enterprises must be able to "mix and match 
software and SaaS." 

A hybrid implementation cannot presume 
a static user population but must accommo- 
date changing needs and job roles such that 
employees can shuttle back and forth 
between an internal system and online SaaS 
depending on their job assignments. 



Such user account transience means 
migrations must be transformed from a pro- 
ject to a process. According to Pray, "Rather 
than big-bang migrations every several 
years, companies will continually migrate 
users and email data as they fine-tune who 
stays on the SaaS version and who stays on 
the software version." 

SaaS email vendors are most interested in 
moving users to their service and thus have a 
vested interest in providing migration tools 
that ease that transition. But these utilities 
seldom work in the reverse direction. Third 
parties have stepped into this breach with 
point products and migration services. 

Although migrating user email, calendar, 
and contact data does present a challenge. 
Pray says moving user credentials to SaaS is 
relatively easy because most services can 
synchronize with corporate LDAP or Active 
Directory databases. 

SaaS email has matured rapidly and now 
incorporates most features, including cal- 
endars, contact lists, instant messaging, 
and even voice integration, of enterprise 
mail systems. Unlike basic email, though. 



these auxiliary collaboration features sel- 
dom integrate seamlessly with on-premises 
systems. The biggest missing piece is cal- 
endar free/busy viewing and scheduling. 
Cloud-based calendars can't yet bridge the 
Exchange-SaaS boundary, but again, third 
parties offer solutions to fill this void. 
Other features Outlook/Exchange users 
might miss include shared or public fold- 
ers, corporate address books, and integra- 
tion with on-premises collaboration tools 
or social software. Here, too, there are 
third-party point products to plug many of 
these gaps. 

Primary l\/lotivation 

Although cost controls have been the 
motivation for enterprises to consider SaaS 
email, Laczynski says customers are find- 
ing the associated online collaboration 
features an inviting by-product. As users 
discover how easy it is to search messages 
or documents and share information, 
he says, they often say, "This stuff just 
works better. So we're starting to see use- 
case-driven cloud adoption." 

Because many companies will retain on- 
premises email, developing the tools and 
processes to automate user migrations 
between environments will be critical. Pray 
says fierce competition in the online email 
market could trigger SaaS providers to 
develop better tools, and he advises asking 
potential cloud vendors about support for 
bidirectional data migration before signing 
a contract. In the interim, look to the bur- 
geoning ecosystem of third-party cloud 
integration services to assist in minimizing 
the pain of integrating external services 
into the corporate IT portfolio. 
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PROCESSOR. 

It's all about products, news, and 
information data center professionals can trust. 



Dynamic Email IVIigration Guidance Frameworl( 

In order to create the dynamic migration process, an enterprise must methodically create and 
move through the following phases: Pre-work, Process Creation, Testing and Pilot Runs, and 
Ongoing Follow-up. Pre-work starts with understanding the email solutions and environment, 
going on to identify migration technology options. The next step is to create an email migration 
process that can be repeated and refined as necessary to achieve easy and inexpensive 
migrations of varying sizes. The initial creation of the process is aided by testing the process 
and using a pilot run to identify any major issues. Training is also important to bring the per- 
sonnel involved in the process up to speed. Finally, measure and refine the process and work 
to make email migration replicable, fast, easy, and inexpensive. 

Source; "Email Migration: How to Move with Agility"; Burton Group Research Report by Bill Pray; Dec. 22, 2009. 
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FEATURED COMPANY 



Comprehensive 
Email Security 

Vircom Covers All The Bases For Protecting Your Company From Email-Borne Malware 



by Robyn Weisman 

When Montreal-based email security 
solutions provider Vircom opened its 
doors in 1994, it specialized in designing 
software that let people dial in to and 
access bulletin board systems. But as 
the Internet began its ascendancy in the 
mid-1990s, Vircom switched its sights 
to email security. "Back in 1997 and 
1998, spam started appearing, and our 
founder, Sylvain Durocher, made us one 
of the first players to address this security 
problem," says Damien Rame, Vircom' s 



as Nigerian bank scams and other oddly 
worded requests 

• Policy management and custom fil- 
ters that can easily be scripted and 
integrated using Sieve mail filter- 
ing language 

• Vircom' s proprietary Sequential Content 
Analyzer, an advanced artificial intelli- 
gence engine that can suss out every- 
thing from image spam to misleading 
URLs that the other layers might miss 

Rame points out that these multiple 
layers of configuration provide flexibility 




VIRCOM 

email security matters 



marketing manager. "Email security 
defines us to this day." 

Vircom (www.vircom.com) has more 
than 2,500 customers from a wide range 
of industries, including Match.com, 
Remington Arms Company, Goya Foods, 
Pitney Bowes, and the Philadelphia 
Phillies. According to a recent case 
study, more than 70% of Remington's 
email traffic consisted of spam, and the 
company was unable to stop a rash of 
virus outbreaks. Remington, a classic 
SME, purchased Vircom' s modusGate 
appliance with a 1,000-user license. 
Spam disappeared almost from the 
moment Vircom's support engineers 
implemented and configured the appli- 
ance for Remington's needs. 

Email Security Leader 

Vircom's proprietary modus technolo- 
gy provides a comprehensive approach 
to scanning email for viruses, worms, 
spam, and other threats. Every incom- 
ing email passes through modus' 
Multi-Layer Spam Scanning engine, 
which includes a number of power- 
ful safeguards: 

• Connection-based Sender Reputation 
System, which is reactive to spam waves 
and provides the ability to check the rep- 
utation of IP addresses 

• Forbidden attachment blocking, which 
lets IT managers automatically block 
targeted attachments such as those with 
the .EXE suffix 

• Malware protection from McAfee, 
Norton, or a combination of both anti- 
virus engines 

• Trusted and blocked sender policies that 
execute an array of whitelist- and black- 
list-related actions 

• Spam, phishing, and foreign-language 
filtering, which eliminates such attacks 



for a variety of infrastructures. "They are 
configurable starting at [the system 
level], to the domain settings, the depart- 
ment settings, user settings, and so forth," 
he says. "You can have several domains 
hosted on a specific mail server and 
another set of domains on another server, 
and each of these domains may have dif- 
ferent settings." 

The granularity that the modus technol- 
ogy offers allows for a variety of scenar- 
ios. For example, a company's marketing 
department can be set up to have a more 
aggressive spam filtering scheme that sifts 
out emails with certain keywords — a setup 
that may not be warranted for, say, the 
accounting department. 

Additionally, modus technology pro- 
vides the foundation of all the products 
that Vircom sells. "IT administrators need 
a solution that works so great that for the 
most part, they can install it and then for- 
get about it, and modus was developed to 
address everything to make an email envi- 
ronment secure," says Rame. 

Flexible Solutions 

Vircom offers two primary product 
lines, both of which are designed for 
Windows environments. The first is 
modusMail, an all-in-one antispam mail 
server that gives data center managers just 
about every tool they need for safe email 
handling. This high-performance solution 
comes with an easy-to-use end-user GUI, 
full message encryption, access control, 
and comprehensive reporting and compli- 
ance tools as well as modus' antispam and 
antivirus technologies. 

The modusGate antispam appliances are 
a collection of email gateways that come 
as either physical appliances or virtual 
machines. The physical version comes in 
three sizes. The midrange M150, targeted 



to SMEs, can process as many as 5 million 
incoming email messages per day, while 
its top-of-the-line mBlade, used by many 
ISPs, can handle an average of 17 million 
incoming emails per day. 

All modusGate gateways integrate 
seamlessly with Microsoft Exchange, IBM 
Lotus Domino, or generic SMTP servers. 
"A company email stream might contain 
90% spam, malware, or other electronic 
threats, so that out of 100 potential emails, 
you get only 10 actually hitting Exchange 
server," Rame says. "It makes a difference 
in the amount of processing your server 
has to perform." 

Vircom also offers modusGate VM, 
which lets administrators install the solu- 
tion directly on their own hardware with 
the same type of results that its physical 
counterparts can achieve. "One of the 
things that makes us attractive [to poten- 
tial customers] is that we don't force peo- 
ple into buying a hardware solution," 
Rame says. "You can buy software as is 
and install it on existing servers that you 
have, which can lower costs compared to 
hardware-only solutions, as well as offer 
flexibility. Many companies already have 
their servers and their blades in their 
[data center] and don't want to add a 
superfluous box." 

Vircom will soon be releasing a new 
version of modus and new iterations of 
all of its products. The company will 
also be launching its new Email Policy 
Management module, about which Rame 
is excited. "The goal of the module is to 
provide complete inbound and outbound 
enforcement of email policies," says 
Rame. He explains that this module will 
examine every inbound and outbound 
email and apply sets of rules so that, for 
example, any email from the HR depart- 
ment that includes a Social Security 
number can be automatically corralled 
into a moderation queue to be checked. 
Given the number of well-publicized 



leakages of personal data, this new mod- 
ule provides yet another layer of pro- 
tection that most companies require to 
safely run their businesses. 

Technical Expertise Baked In 

Although Vircom's primary business is 
email security solutions, Rame says that 
the company is at the same time employee- 
oriented. "Vircom defines itself by the 

Vircom 



(888) 484-7266 
www.vircom.com 

• Vircom specializes in email security prod- 
ucts, such as its modusGate anti-malware 
gateway and its moduslVlail antispam 
email server. 

• The company will soon release a policy 
management module to aid in regulating 
incoming and outgoing email. 

• "IT administrators need a solution that 
works so great that for the most part, they 
can install it and then forget about it, and 
modus was developed to address every- 
thing to make an email environment 
secure," says Damien Rame, Vircom's 
marketing manager. 



technical expertise behind email security 
and antispam technologies, and we're 
very oriented toward our employees 
[because] most of the people in our com- 
pany are technical people — geeks, gurus, 
and so forth. They thrive on the chal- 
lenges brought about by these problems," 
Rame says, adding that the company's 
service and support department regularly 
helps customers set up their IT infrastruc- 
tures to maximize the effectiveness of its 
solutions and provides three levels of tech 
support plans. 



Vircom Featured Products 


Product 


DescrlDtlon 




Specialized email security gateway that protects against^^ 
viruses, spam, phishing, and other malicious attacks while 
relieving the primary email server from having to process 
these messages. 


modusGate Antispam 
Appliance 


modusGate VIVI 
1 


Offers same features as the modusGate antispam 
appliance in a virtual machine. 


modus Email Policy 
Management 


Policy management module that lets administrators set up 
and configure policies and rule sets for inbound and out- 
bound email. 


modusMail 


Integrated antispam email server that blocks threats 
at network and content levels and provides granular 
security and access control for inbound and outbound email. 
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Windows Phone 7: 
What Should 
Enterprises Expect? 



The Good, The Bad & The Unknown 



by Brian Hodge 

In mid-February, Microsoft previewed its 
next mobile operating system, Windows 
Phone 7. Although the new OS isn't sched- 
uled for release until late 2010 and could 
further evolve by then, WP7 appears at first 
glance to be targeted toward a young, 
media-hungry demographic inclined toward 
social networking. 



Key Points 



• Windows Phone 7 will offer an improved 
interface, ActiveSync, and the ability to 
work with Office files stored on the phone 
and synchronized through SharePoint. 

• Because WP7 is an entirely new platform, 
it won't run previous Windows Mobile 
applications. 

• Microsoft may be betting their future enter- 
prise success on businesses moving to 
cloud-based application environments. 



Early reactions across the business 
community have been tepid because 
of the platform's incompatibility with 
whatever productivity applications com- 
panies may currently be using under Win- 
dows Mobile. 

Understanding what this new OS may 
mean to your company will give you a 
head start on deciding whether it's a deal- 
breaker or a game-changer. 

So Far, So Good 

On the plus side, WP7 looks far more 
appealing and easier to use than its 
predecessors, with large tiles instead of 
small icons and touchscreen scrolling 
and panning. 

An Office Hub will let users work with 
Word documents. Excel spreadsheets, and 
PowerPoint presentations, whether they're 
stored on the phone or synchronized with a 
SharePoint server, and email shouldn't 
miss a beat. 

"It will have ActiveSync, so you will be 
able to connect up with Exchange," says 
Jack Gold, founder and principal analyst at 
J. Gold Associates. "Although, I asked them 
specifically about things like encryption, 
and they didn't clearly define it, so that's 
an issue from a security perspective. But it 
looks like it will be able to do some level of 
encryption, some level of device kill, like 
the old days. So that's all good." 

Beyond this, anyone expecting a smooth 
transition from Windows Mobile may be in 
for a rude awakening. 

Rather than being a refresh of previous 
Windows Mobile versions, WP7 is a total- 
ly new platform, intended to reverse 
Microsoft's declining share of the mo- 
bile market. 

"One of the big knocks against WinMo 
predecessor versions is that it's an interface 
that needs quite a bit of help," says William 



Stofega, program director of mobile device 
technology and trends at IDC. "The philos- 
ophy going forward was: 'Part of the rea- 
son that the OS and the UI experience were 
so bad in earlier versions was because we 
let it get that way.' So they look at success 
models in terms of vertically integrated 
hardware and software." 

This reboot means that business applica- 
tions written for earlier Windows Mobile 
versions won't run on WP7, and it would 
be risky to assume their developers will 
automatically release new versions. 

"They're basically up a creek without a 
paddle when WP7 comes out, because 
they'll either have to abandon or rearchi- 
tect," Gold says. "My guess is most compa- 
nies would abandon and choose a different 
platform rather than port to WP7." 

Hardware & Control Issues 

Microsoft is imposing stringent hardware 
requirements on manufacturers intending to 
make phones running WP7, including a min- 
imum IGHz CPU, GPS, and a 5MP camera. 
Existing Windows Mobile phones that don't 
meet the guidelines will not be upgradeable. 

Although that's crystal clear, what isn't 
clear at this point is how easy WP7 will 
make it for IT to exercise control over com- 
pany phones. After all, many new features 
that Microsoft has been promoting, such as 
Facebook, access to Xbox Live, and stream- 
ing Netflix movies to the phone, could be 
regarded as distractions or security risks. 

Gold thinks it's likely that IT will be 
allowed to disable these. "[WP7] will have 
a full implementation of ActiveX, and 

Windows Phone 7: 
Nothing Is Set In Stone 

Devices running WP7 won't appear for sev- 
eral months, so it's possible that what now 
appear to be issues for business use will be 
addressed. 

"In the mobile device world, it's even faster 
than pop music in terms of trends and hand- 
sets and everything else, so I think there'll be 
something there to take up the slack," says 
William Stofega, program director of mobile 
device technology and trends at IDC. 

What users shouldn't expect, however, are 
multiple versions of WP7, with a separate 
version for business. Microsoft shortened the 
platform's original name, Windows Phone 7 
Series, precisely because it gave that erro- 
neous impression. 

'They could decide there are some things 
that don't work very well and pull them out. 
Microsoft has certainly done that in the past," 
says Jack Gold, founder and principal analyst 
at J. Gold Associates. "We're going to have to 
wait and see. All bets are off at this point." 



ActiveX does allow certain policies to be 
set. I think the intent is to offer some level 
of capability to turn things on and off." 

Then there's the matter of deploy- 
ing applications. So far, the only way of 



provision for traditional app deployment, it 
may be that Microsoft is looking to push a 
different mobile model altogether. 

Head In The Clouds? 

Business is increasingly moving from 
company-issued phones to having employ- 
ees buy their own, within constraints, 
which are then connected to the network. 
Gold thinks Microsoft is betting on these 
users. Although this scenario precludes 
companies from heavily using on-device 
application clients, again, this may not be 
Microsoft's ultimate vision. 

"I think what Microsoft is relying on is 
that more companies will move to cloud- 
based application environments," Gold 
says. "If that's the case, then the OS be- 
comes less relevant, and what becomes rel- 
evant is the browser, because that's where 
the cloud computing stuff runs." 

Thus, the real WP7 issue facing your 
company may be less about a phone and 



Rather than being a refresh of 
previous Windows IVIobile versions, 
WP7 is a totally new platform, 
intended to reverse Microsoft's 
declining share of the mobile market. 



getting apps onto phones that Microsoft has 
accounted for is going through their 
Marketplace app store. Although it seems 
logical they would eventually unveil a 



what it can support and more about running 
productivity apps through WP7's version of 
Internet Explorer. 
The next few months will tell the tale. B 



Clerity UniKix 11.2 



NEW PRODUCT 



by Marty Sems 



Mainframe Rehosting Software 

That Modernizes, Simplifies, Reduces Costs 



In the dawn of the new decade, it's only 
fitting that there's an updated way to 
wean your data center off expensive 
mainframe hardware. 
Clerity's new version 
11.2 of its rehosting 
software UniKix comes 
with a variety of en- 
hancements based on 
feedback from the more 
than 1,300 sites in its 
global installed base. 

At its heart, UniKix 
gives legacy applica- 
tions and data a place on 
open systems running 
Linux, Unix, Windows, 
or Linux on System z. 
Not a mere software 
vendor, Clerity also pro- 
vides a full range of accompanying ser- 
vices, such as support for scheduling, job 
accounting, print and system manage- 
ment, source/change control, and more. 

Among the new improvements in 
UniKix 11.2 are items that concern JCL 
in the data center. JCL batch jobs can 
now be submitted dynamically thanks to 
assistance from a newly available ad- 
vanced preprocessing feature. Control-M 
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JniKix Transacliol 
Processing Envirorm&nt 









Clerity UniKix 11.2 

Migrates and hosts legacy data and 
apps on open systems. 




JCL can now be translated to MVS 
JCL; this development can help IT 
admins curtail the use of other schedul- 
ing solutions, if not get 
rid of them entirely, 
Clerity says. Likewise, 
UniKix's built-in capa- 
bilities supersede those 
of mainframe utilities 
such as OMEGAMON, 
which may let your staff 
reduce the number of 
apps in the environment. 

Version 11.2 also ad- 
dresses the abilities of 
the software's core func- 
tionality, of course. Uni- 
Kix can run rehosted 
batch or online work- 
loads with native 64-bit 
performance, the company says. Also 
new is support for sync level 2 transmis- 
sions over SNA channels. 

UniKix is well-known for its remark- 
able compatibility with CICS and batch 
processing environments, Clerity says, 
and it continually gets better as the 
company's developers incorporate 
tweaks based on real-world input from 
its customers. 



(888) 273-4678 
www.cleritycom/unikix 
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News 




I IT-Based Health Savings 
Could Save Billions 

New IT-based technology initiatives could 
save billions of dollars, according to a new 
report by the Commission on U.S. Federal 
Leadership in Health and IViedicine. The 
report discusses how the adoption of elec- 
tronic health records and other technologies 
could impact the public healthcare infrastruc- 
ture. According to the report, some $261 bil- 
lion could be saved over the next 10 years. 
Currently, though, widespread implementa- 
tion of such technological advances as EHRs 
(electronic health records) is lagging. Only 
about 20% of physicians and 8 to 1 0% of 
hospitals have adopted EHRs. 

I E-l\/ledical Records 
Rank As Important 

Of the 178 hospital ClOs, IT directors, and IT 
managers responding to a recent survey by 
NewGrowth Consulting, only 25% listed e- 
medical records as one of the most important 
initiatives for their hospitals over the next two 
years. However, respondents regularly listed 
e-medical records and electronic ordering 
systems as one of the top priorities for their 
hospitals. About 58% say ElVIR systems are 
the most important IT project, followed by 
computerized physician order entry at 56%. 
Security initiatives ranked third at 47%, while 
database initiatives ranked fourth at 42%. 

I New Wireless Networking Standard 
In The Works 

The Wi-Fi 
Alliance 
and the 
Wireless 
Gigabit Alliance 
have joined forces 
to create a multi- 
gigabit wireless net- 
working standard 
for the 60GHz fre- 
quency range. The 
groups indicate that 
the 60GHz band 
will complement 

existing Wi-Fi technology because it will be tar- 
geted at applications requiring gigabit speeds 
for high performance. The new devices will 
also support traditional Wi-Fi found on the 
2.4GHz and 5GHz spectrums. Also known 
as WiGig, the 60GHz frequency will provide 
transfer rates at gigabit speeds rather than the 
traditional megabit wireless speeds. The two 
alliances expect that there will be a new class 
of tri-band devices that will support the 2.4GHz, 
5GHz, and 60GHz spectrums. 

I ITC Investigates Apple Claims 
Against Kodak 

The International Trade Commission will 
look into a patent infringement claim leveled 
against Eastman Kodak by Apple. Apple 
claims that Kodak infringed upon its pat- 
ents on some digital imaging and memory 
technologies in several Kodak devices, 
including some of its cameras and digital 
camcorders. Apple is seeking a ban on the 
import of Kodak products into the United 
States. Previously, Kodak filed its own com- 
plaint alleging that Apple and Research In 
Motion violated some of its patents, includ- 
ing those for photo software. Kodak leases 
its technology to some phone makers, but 
Apple and RIM reportedly wouldn't agree to 
lease terms. 
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Plan & Prepare For 
An Enterprise-Wide 
Software Update 

Intentional Planning & Continuous Monitoring Are Needed 



by John Brandon 
• ■ ■ 

Upgrading one laptop with new soft- 
ware is fairly trivial for most enterprises. 
If an end user needs a new capability or 
help in resolving a complex business prob- 
lem, it's a one-on-one project. It's also an 
easy process to plan, as long as you know 
when the user is available, when the soft- 
ware will become available, and when you 
will perform the upgrade. 

However, with an enterprise-wide soft- 
ware deployment, especially one that is 
related to a critical business process, plan- 
ning takes on a whole new meaning. The 
preparation process is more like a 
labyrinth, and it can be difficult to even 
know where to start. Fortunately, a few 
critical steps can help you plan and pre- 
pare for a successful rollout — one that 
helps your enterprise (and your employ- 
ees) be more productive with a given tech- 
nology advancement. 

Project Scope 

When it comes to a new software 
deployment, you need to know its scope. 
This one word is often what separates 
a smooth rollout from one that causes 
many hours of frustration. Determining 
the scope of the deployment is critical 
enough that it should be the primary 
phase, not the actual deployment. Scope 
implies knowing the assets you will 
update, how business processes will 
change, and the implications of that 
new process. 

Chip Bates, director of product devel- 
opment at ConverterTechnology (www 
.convertertechnology.com), says any 
analysis of scope should start with the 
users and whether user systems can be 
updated all at once or incrementally. For a 
software update such as Microsoft Word, 
he says it's important to also look at the 
implications of the rollout as it relates to 
user groups, determining whether docu- 
ments for every user will be updated to 
the new version or if it will be a more 
gradual process. 

Part of understanding the scope also 
implies knowing which assets you have in 
the company and their current versioning, 
says Jeff Kugler, solutions consultant with 
IFS North America (www.ifsworld.com 
/us). "When it comes to enterprise applica- 
tions, I think the scope of the project 
depends on how old and out-of-date your 
version of the software is," he says. "The 
further behind you are in versions, the 
more complex and expensive the upgrade 
will be. That is an important thing to 
understand going in and ought to make 
people see the wisdom in staying current 
on versions." 

Planning Steps 

After determining the scope of a pro- 
ject, including knowing the affected 
user base and identifying which versions 
are currently installed, the next step in 



Key Points 



Know the scope of the rollout, especially in 
terms of the user needs and what versions 
you are running currently. 
Potential costs include the update itself, 
related data conversion, and new training 
for employees. 

There are specific tools available that can 
make the update run smoothly and help 
with communication with employees. 



planning for a software update has to do 
with risk assessment. Kugler says an 
enterprise should ask some hard ques- 
tions about whether a new update will 
impact the business in ways that are 
not actually worth the update or would 
require more planning and preparation 
than anyone first thought. For example, 
he says a vendor might insist that a new 
word processing upgrade will not change 
how a document management system 
runs. In another case, he has seen ven- 
dors downplay the planning required for 
environmental tracking systems. Good 
preparation might mean updating legacy 
systems or backing up operations so they 
work well with the new update. 

Bates says that companies should also 
analyze whether updates will be compat- 
ible with their other applications, includ- 
ing those that are also in need of an 
eventual upgrade. 

Costs For Rollouts 

Planning for a new software update is 
just a matter of understanding the scope 
and analyzing company assets. It can 
mean budgeting for unforeseen expenses 
that could arise. Alese Stroud, a consultant 
with The Stroud Group Consulting, says 
predicting costs related to an enterprise- 
wide software update will involve a seri- 
ous examination of current capabilities. 

"The costs will include acquisition 
of the new software, staffing for the 
project, software tools needed to manage 
and report on the job, software tools 
needed to perform the conversion and 
upgrade, training and documentation 
costs, [and] potentially associated mar- 
keting or customer communication costs 
in some form," says Stroud. "There is 



always the hidden cost of making errors 
[in the rollout]." 

Some of the soft costs involved have 
to do with employee acceptance of the 
new update. 

"Training is another cost that often 
gets nixed from the budget, but what 
doesn't get captured is the effect on user 
productivity and morale when ill-trained 
users began using the upgraded soft- 
ware," says Bates. "There is really not a 
great way to organizationally capture the 
impact of self-learning, as workers will 
I just put in longer hours to make up the 
difference. However, if the learning delta 
is too large, then users will push back 
heavily and the ultimate success of the 
project will be at risk." 

Tools To Help You Plan 

Several tools are available to aid in the 
planning process. For example, you might 
use a document conversion program that 
finds all documents on networks and 
converts them to the updated software 
version before you actually deploy the 
update. That way, the business will run 
smoothly as soon as the update comes and 
can continue working as normal. With 
this planning step, it's important to know 
exactly when you will update the data and 
follow that process quickly with the soft- 
ware rollout. 

Marcus Yoder, senior manager with 
Kalypso (www.kalypso.com), says some 
of the tools related to a company-wide 
software update have a social networking 
flavor. For example, you can set up a cen- 
tral repository for all documents related to 
the rollout, create wikis and internal blogs, 
and even set up an SMS messaging system 
to communicate with the users in a more 
direct fashion. 

The more you communicate about the 
software update prior to implementation, 
the more users will know what to expect 
and will understand the implications, ben- 
efits, and potential pitfalls, which include 
new licensing requirements, hardware 
incompatibilities that relate to the software 
version, and new bandwidth requirements 
for the network to meet potential demand 
or new capabilities. However, in the end, 
the update will in turn provide benefits to 
the organization, as long as the plan makes 
them crystal clear. 



TOP TIPS 



When determining scope, 
look at the current assets, 
the way the software up- 
date will impact processes, 
and the implications for end 
users when you establish a 
new process. 

It's important to consider 
training costs. The best 



advice here: Include train- 
ing as part of the overall 
cost of the new software 
update and not as an ancil- 
lary endeavor. 

Use tools such as social 
networking portals and doc- 
ument repositories to help 
managers communicate 



with end users and with 
each other. 

With any software up- 
date, focus on the new 
advantages, such as a 
requirement for fewer 
management resources 
because the new software 
is easier to use. 
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Mobilizing The Enterprise 

Provide Mobile Access To Enterprise Applications 



by Sue Hildreth 

As SMARTPHONES and Other mobile devices 
become standard work tools for traveling 
and remote employees, IT departments at 
even small organizations are having to grap- 
ple with how to provide mobile access to 
enterprise applications. So far, the most 
common activities of mobile employees 
have been email and calendaring, but that's 
being quickly followed by such enterprise 
applications as sales, customer support, mar- 
keting, finance, and other lines of business 
applications, according to mobile consul- 
tants and analysts. 

"We're seeing new types of applications 
working their way into the organization, 
driven by line-of-business requirements," 
says Michele Pelino, principal analyst at 
Forrester Research. According to IDC, 
smartphones accounted for 18.8% of all 
mobile phones shipped in the first quarter of 
2010, up from 14.4% in first quarter 2009. 

For the most part, providing mobile 
access is a good thing for companies to 
do — it lets employees access needed data 
from the road and respond more quickly to 
co-workers and customers. But mobile 
devices also come with concerns, including 
the need to ensure security for company 
data, the problem of how to support differ- 
ent devices and their incompatible plat- 
forms, who has to pay for the devices and 
replace them if lost, and how to give multi- 
ple smartphones with different operating 
systems access to large, sometimes propri- 
etary or customized enterprise applications. 
Providing mobile access to enterprise apps 
may also require the addition of 3G network 
capabilities or Wi-Fi. 

Those are some of the issues that Michael 
Finneran, president of dBrn Associates 
(www.dbrnassociates.com), a wireless con- 
sulting company, has to consider when he 
meets with a new client that is intent on 
adding mobile access. 

"There's a whole bunch of things we look 
at, and it starts with the basic questions — 
who's mobile, where are they going, what 
does [the mobile device] have to do when 
they get there? That's the framework I start 
with — what types of positions are mobile, 
[and] where are these people going — is it on- 
campus, offsite, or international? Inter- 
national data services are expensive. Then, 
what do the people want to do — data entry, 
looking up email or contacts, recording a 
transaction?" says Finneran. 

Here are some key guidelines for mobiliz- 
ing enterprise applications. 

Plan For Multiple Modes Of Mobility 

As Finneran notes, different users may 
need to access the company systems from 
various locations on different types of 
devices. A laptop user can make use of a 
cable connection and browser interface. A 



Key Points 



Take an inventory of what types of 
access users need and which systems 
they'll be accessing. 

Plan to provide more than one type of 
mobile access, including Wi-Fi, landline, 
and cell phone. 

Standardize on two or three mobile 
device platforms. 



cell phone probably won't be able to make 
use of a browser, and, unless it's doing basic 
email, it will need a specifically designed 
client for each application, meaning that the 
organization must either develop a client- 
side application for the devices, get one from 
the vendor of the enterprise application, or 
find a third-party vendor that makes inter- 
faces. For some users and applications, 
online access may not even be needed; sim- 
ply being able to synchronize the mobile 
data with the home application is enough, 
says Jack Gold, head of research and con- 
sulting firm J.Gold Associates. 

In fact, most users will need some type of 
offline capability, so they can work on their 
devices when on airplanes or other places 
where online access is limited. That will 
require a client application capable of 
caching data. "If you can't get a connection 
and don't have an application you can run 
locally, then you can't get any work done," 
says Gold. 

So start with an inventory of what types of 
access users need, which systems they'll be 
accessing, and what backup access methods 
will work best if the primary channel is 
unavailable for some reason. 

Consider SaaS Solutions 

Most providers of hosted, or cloud- 
sourced, applications provide ready-made 
clients for remote devices in addition to 
the desktop or laptop. That's particularly 
true in the sales and CRM space. SaaS 
providers also take on the burden of main- 
taining the network, securing the applica- 
tions, and updating the client software. So 
it may be worthwhile to consider moving 
to a hosted version of the application that 
is to be "mobilized." As Gold points out, 
developing your own mobile interface and 
middleware to enterprise systems is no 
small undertaking. 

"One of the biggest challenges is taking 
an existing application and mobilizing it. 
It's not just about writing some code. It 
requires an understanding of many issues, 
such as bandwidth needs. For instance, 
many organizations don't have 3G yet. You 
don't want to design an application that 
exposes data and costs the company a cou- 
ple million dollars because it wasn't HIPAA 
or [Sarbox] compliant." 



IDC Sales Data On Handhelds 

Users increasingly expect to use their smartphones as well as their laptops to access the 
company network. But which device should you support? According to IT research and analysis 
firm IDC, these are the top three most popular makers of smart devices. 



Company 

t Nokia 21.5 

Research In Motion 10.6 

Apple 8.8 



Units Shipped (In iVIillions) Share Of IVIarlcet As Of 01 2010 



39.3% 
19.4% 
16.1% 



Assess Security Requirements 

Smartphones have different levels of secu- 
rity, so depending on how sensitive the infor- 
mation that employees will be accessing and 
downloading is, some models may not be 
appropriate. Some, for instance, have encryp- 
tion built in, while others don't but can sup- 
port it as an addition, and some don't support 
encryption at all. 

Unless an organization is using a hosted 
SaaS provider for its remote access, it will 
also need to evaluate the security status of its 
internal systems and network. Small compa- 
nies in particular can be lax about security 
when opening up the network to remote 
workers, says Anthony Fuller, the CEO of 
Mobile IT (www.mobileit-usa.com) which 
provides managed services to SMEs. 

"Often when we come into a company, we 
find everything opened up, with files shared 
out for everyone to get to, the laptops don't 
have critical [security] updates, and the 
antivirus software may be of a lower grade," 
says Fuller. 

Limit Support For Personal Devices 

Although you may not be able to control 
what handhelds your colleagues bring to 
work, you can establish a clear policy as to 
which devices the company will support for 
access to work applications (and which it 



won't). It's also possible to Umit device sup- 
port based on job function and applications 
to be accessed. That helps to cut down on 
support issues and has the added benefit of 
allowing IT to purchase or develop fewer 
client interfaces for its enterprise applica- 
tions. In some cases, the company may want 
to forbid usage of some devices. For exam- 
ple, smartphones that don't and can't 
support encryption shouldn't be used by 
employees who access sensitive data, espe- 
cially if it's covered by federal regulations. 

If the organization has the budget to 
provide employees with laptops or smart- 
phones, rather than relying on the employ- 
ees' personal devices, then it can more easily 
standardize on one or two devices and main- 
tain control over the security and mainte- 
nance of the devices. When selecting the 
hardware, line-of-business users should pro- 
vide input but shouldn't have the final say. 
The company's budget and IT resources 
should be factored in as well as the security 
capabilities and middleware available to pro- 
vide back-end access to specific apps. 

Keep Client Applications Simple 

Although it's possible to cram many fea- 
tures into a mobile application, too many fea- 
tures can make the application overly com- 
plex for the user, says Pelino. 

"One downfall is when people try to do 
too much with the applications for smart- 
phones. I've heard multiple examples of 
companies that say they've developed the 
brightest application for their marketing 
team, or HR team, or whatever, and they 
don't understand why nobody is using it," 
she says. "They didn't keep in mind the 
needs of the end users." 
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Global Knowledge 




Global Knowledge , 



Global Knowledge is the worldwide leader in IT and business skills training. The 
company delivers courses via training centers, private facilities, and the Internet, 
letting customers choose when, where, and how they want to receive training programs 
and learning services. Global Knowledge specializes in high-quality, hands-on data 
center training courses that are delivered by accomplished cross-domain experts. 
Instructors are certified Cisco Systems and VMware Certified instructors with real-world 
experience. The company's broad-based data center curriculum includes VMware, 
Cisco, Sun, IBM, Red Hat, and Microsoft courses as well as other subjects. 

• Learn from experienced instructors and award-winning curriculum 

• Engage with custom hands-on labs and exercises 

• Choose from robust delivery options 

• Train a local group or a dispersed workforce 

• Select from more than 1 ,200 courses 

Best For: IT training for the individual or for the enterprise organization that requires 
skills development or certification. 



(800) 268-7737 
www.globalknowledge.com 



TechSkllls 
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NetCom Information 
Technology 



riETCom 

INFORMATION 



TECHNOLOGY 



NetCom Information Technology, headquartered in New York, was recognized by 
Microsoft as its 2007 Worldwide Learning Solutions Partner of the Year. NetCom has 
training centers located in 18 states across the country and offers training solutions for 
more than 1 ,000 technical, application, and project management courses to Fortune 500 
companies, businesses, government agencies, and individuals. NetCom's subject 
matter experts provide authorized hands-on education in the latest technologies from 
leading vendors, including (ISC)2, Adobe, Autodesk, Check Point, Cisco, Citrix, CIW, 
CompTIA, EC-Council, Microsoft, Novell, Oracle, PMI, and others. NetCom is an autho- 
rized testing center for Sylvan Prometric, VUE, and Certiport. The company is also a 
New York and New Jersey Workforce Training Provider and a licensed school regis- 
tered with the New York State Education Department. 

• Provides world-class training and certification preparation for the most in-demand 
computer technologies 

• Offers authorized career training classes in Microsoft, Cisco, Adobe, PMI, Autodesk, 
Oracle, Novell, CompTIA, and more 

• All courses and boot camps are hands-on, led by certified instructors using the 
latest equipment 

• On average, NetCom instructors have 1 1 or more years of experience in the subjects 
they teach 

• Curriculum options aimed at helping students become Web site developers, database 
administrators, computer programmers, graphic designers, security specialists, and 
project managers 

• In the last decade, NetCom has delivered training to thousands of individuals 
and corporations 

Best For: IT, security, and project management training for beginners and also for 
experienced staff looking to enhance their careers or enter a new market. 



(888) 563-8266 
www.netcominfo.com 



United Training 



United 

Trainini 



TechSkllls is a nationally recognized leader in education delivery, specializing in skills 
and certification training for careers in information technology, healthcare services, and 
business. TechSkllls' teaching methodology combines elements of traditional instructor- 
led education, the latest online learning tools, and extensive hands-on skill-building to 
create an effective and efficient learning process. Students control what they learn, 
when they learn, how they learn, and how rapidly they progress. Based in Austin, Texas, 
TechSkllls operates more than 25 campuses in 16 states. TechSkllls campuses are 
licensed in each state in which they operate, and select TechSkills campuses are 
nationally accredited by the Accrediting Council for Continuing Education & Training. 

• Offers personalized programs that include morning, afternoon, evening, and weekend 
classes; online and on-campus study options; intensive small group "microlab" 
training sessions; and the latest online learning tools 

• Course customization lets you skip what you already know and progress at your 
optimal speed 

• Hundreds of hands-on lab activities to provide real-world experience 

• Online access 24/7 lets you work through on-the-job scenarios in real time 

• More than 90% of TechSkllls' students pass their industry certification tests on their 
first attempt; if you don't pass your certification test the first time, TechSkills will pay 
for one retake for every successfully completed course 

• Job placement assistance that includes personal coaching, help with resumes, and 
career development workshops 

• Multiple programs, including Microsoft, Cisco, Oracle, and IT security certification 

Best For: Students seeking certification in IT, technical, or business areas. 



Actually a consortium of independently owned training centers. United Training 
concentrates on helping its members provide high-quality IT training from regional 
providers. Since 2000, the company has been delivering training nationally and 
developing strategic relationships with manufacturers and vendors of IT-related 
products and services. The company's goal is to provide quality training throughout 
North America on any IT training product, anywhere, and at any time. United Training 
offers in-class, private, and mobile classroom training options, and many members 
offer Web-based virtual classrooms. United Training regularly offers free Webcasts. In 
addition to the typical communication channels, members and students can comment 
on and communicate with the company via Twitter and Facebook. 

• Microsoft Gold Certified Partner 

• Courses offered in most states and in Canada 

• Hundreds of courses offered in more than 50 technology areas, including Web 
development, programming, CRM, SOL Server, and Exchange 

• Many courses offered for Cisco, MCSA/MCSE, and other certifications 

Best For: IT staff seeking basic or advanced certification in multiple areas and 
employees needing introductory coursework in popular business applications. 



(800) 639-7545 
www.techskills.com 



(603) 952-4712 
www.unitedtraining.com 
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Processor's Product Spotlight highlights options available in key data center product 
categories, providing product information side-by-side for easy comparison. 

Compiled by Rod Scher 



New Horizons Computer Learning Centers 



New Horizons ' 

Computer Learning Centers 

With more than 320 locations in 70 countries, New Horizons is the world's largest 
independent IT training company. For the past 28 years, the company has delivered a 
full range of IT training and certification and business skills education. The company 
has helped more than 25 million students and offers courses in hundreds of locations 
around the world. 

• 320 New Horizons locations worldwide, specializing in Microsoft and Cisco 
products and technology 

• Cisco's North American Learning Partner of the Year for 2009-201 

• Microsoft's largest worldwide training partner 

• Flexible training: mentored learning, instructor-led, classroom and online, 
self-paced e-learning 

• The only provider with Mentored Learning capability that gives you all the benefits 
of an instructor while learning at your own pace 

• More than 50 authorized Cisco locations in the United States 

• Local centers, instructors, and customer sen/ice teams that tailor learning paths 
specifically to your business/career goals 

Best For: New and experienced IT staff, including experienced Microsoft technical staff 
looking to cross over into Cisco routing, switching, and voice products, and those seek- 
ing additional ways to increase their marketability. Also ideal for help desk professionals 
looking to improve their skills and enhance their career options. 



(714) 940-8000 
www.newhorizons.com 



Unitek 



UNITEK 

EDUCATION 



Unitek's IT training division offers hundreds of courses in dozens of categories, many of 
them available as all-day, daytime, or evening courses. The division specializes in IT 
training, with Microsoft, Cisco, CompTIA, Red Hat, Sun, and other security certifications 
offered. Some courses are offered over the Web. If you're in a hurry, Unitek's special 
accelerated "boot camps" are aimed at teaching specific skills, tools, or technologies 
over a limited time span in a zero-distraction environment. 

• Courses offered in 13 cities in six states, plus online 

• If your company has four or more people taking the same course, you can "anchor" 
the course, thus guaranteeing that it will run 

• Onsite training available 

• Courses offered for both end users and corporate administrators 

• Unitek is a NetApp Authorized Learning Partner and an authorized Prometric testing 
center, operating multiple exam sites in Fremont and Santa Clara, Calif. 

Best For: IT staff seeking basic or advanced certification in any of several areas: 
Microsoft, Cisco, Citrix, Linux, and others. 



(888) 825-6273 
www.unitek.com/training 



Instantly Search 
Terabytes of Text 
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il Instantly Seaixh 
Terabytes of Text 
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64-bit 



^^ ^^ 



♦ Built-in file parsers and 
converters highlight hits 
in popular file types 

♦ 25+ full-text and fielded 
data search options 

♦ Spider supports static and 
dynamic web data; 
highlights hits with links , 
formatting and images[ 
intact 

♦ API supports .NET, C++, SQL, 
Java, etc. .NET Spider API 

Content extraction only 
licenses also available 



'Bottom line: dtSearch manages a terabyte of text in a single 
index and returns results in less than a second" — InfoWorld 

dtSearch "covers all data sources ... powerful Web-based 
engines" — el/l/ff/C 

'Lightning fast ... performance was unmatched by any other 
product" — Redmond Magazine 

For hundreds more reviews, and hundreds of developer 
case studies, see www.dtSearch.com 



Fully-Functional Evaluation! 
1-800-IT-FINDS • www.dtSearch.com 

The Smart Choice for Text Retrieval® since 1991 



American Portwell Technology CAD-0205 



NEW PRODUCT 



by Marty Sems 



ighty Mite For A Range Of Security Roles 



A LITTLE BIT OF space and a little bit of 
power can pay big dividends, according 
to American Portwell Technology. The 
new CAD-0205 desktop network appli- 
ance, an ultra low-voltage model, gives 
small and medium-sized enterprises a 
surprising amount of flexibility in a less 
than 30-watt package with a mere 7.5 x 
5.9 X 1.65-inch footprint. 




American Portwell Technology CAD-0205 

Compact and versatile security appliance with an Intel 
Atom processor. 

"With the latest Intel Atom processor 
N450 (1.66GHz with 512KB of cache), 
Portwell designs the CAD-0205 smaller 
than previous products," says Product 
Marketing Manager Mark Huang. "It is a 
power-saving solution . . . [that] can 
reduce electricity costs and provide great 
performance per watt." 

SMEs can set up the CAD-0205 in 
a number of roles, including as a se- 
curity platform compliant with HIPAA, 



Portwell 



Sarbanes-Oxley, and PCI DSS. It's 
equally at home providing UTM protec- 
tion (including firewall and anti-malware 
functions) to the network as it is at filter- 
ing content and detecting and preventing 
intrusion attempts. The appliance is also 
suitable for rear echelon duty monitoring 
the network, routing packets, handling 
secure VPN communications, balancing 
loads, streaming files, and applying QoS 
rules to traffic. 

The REACH- and RoHS-compliant 
unit is also available with a dual-core 
Atom D510 with a 1.66GHz clock speed 
and 1MB of cache as well as with a sin- 
gle-core Atom D410 running at the same 
speed but with half the cache. The CAD- 
0205 has a Mini PCIe slot, which opens 
up interesting possibilities involving 3G, 
4G, or Wi-Fi connectivity through add-in 
adapter cards. 

With support for a 2.5-inch SATA 
HDD or SSD and CP, the compact CAD- 
0205 can scale up to 2GB of RAM. 
Connection-wise, it supports a quartet of 
Gigabit Ethernet ports, an RS-232 RJ-45 
console jack, two USB ports, a VGA out- 
put, and dual bypass segment pairs. The 
wall- or rack-mountable CAD-0205 has 
an IA-64 architecture, and IT staff can 
customize the device's front panel. 



(510) 403-3399 
www.portwell.com 
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I iSuppli Releases Q1 
Smartphone Market Share Report 

Research In Motion and Apple were the only 
two manufacturers that saw an increase in 
smartphone shipments from Q4 2009 to Q1 
2010, according to new smartphone marl<et 
share information from research firm iSuppli. 
RIM and Apple now hold the fifth and sixth 
places in the top 10 rankings, respectively, up 
from eighth and ninth places in the previous 
quarter; RIM holds 3.6% of the marl<et, and 
Apple has 3%. The top four slots are held by 
Nokia, which maintained its lead with 37.4% 
of the market; Samsung, with 22.9%; LG, 
with 9.4%; and Sony Ericsson, with 3.6%. 

I Microsoft Settles Patent Dispute 
With VirnetX 

Microsoft says it will dole out $200 million to 
VirnetX Holding to finalize a patent case. 
VirnetX, an Internet software company, orig- 
inally filed suit against Microsoft for infringing 
on its VPN technology, claiming that Microsoft 
was using the technology without paying for it. 
VirnetX won its first case against the comput- 
er giant in March when it claimed Microsoft 
was violating patents in Windows Sen/er 2003, 
XP, Vista, Live Communications Sen/er, Win- 
dows Messenger, Office Communicator, and 
different versions of Office. 




I HP Sees Growth In Q2 Revenue 

Computer maker HP pulled in strong sec- 
ond-quarter numbers with a net revenue of 
$30.8 billion — a 13% increase compared to 
a year earlier. Specifically, HP saw revenue 
increase in the Enterprise Systems and 
Storage group. Personal Systems group, 
and Financial Services business. The com- 
pany's earnings topped out at $2.2 billion, or 
91 cents per share. Projections for future 
quarters are positive because of the acquisi- 
tions of 3Com and Palm. HP expects to see 
revenue between $29.7 billion to $30 billion 
in its third quarter. For its full fiscal year, HP 
anticipates it will grow by 8% overall. 

I Consulting Firm 
Adds To India-Based Staff 

Because of an improved business climate, 
4,000 staff members will be added to the 
Indian staff of Capgemini, a major manage- 
ment consulting, outsourcing, and profes- 
sional services firm worldwide, with more 
staff to be added in the future. This is ac- 
cording to Cyprian D'Souza, chief people 
officer at Capgemini India. The company cur- 
rently employs 23,353 individuals in India, 
with 91 ,792 employees worldwide. India fol- 
lows the "rightshore" delivery model, giving 
customers a choice of delivery locations. In 
reports earlier this month, Capgemini had 
revenue of $2.76 billion for the first quarter, 
somewhat higher than fourth quarter 2009. 




SIX QUICK TIPS 



Data Center 
Etiquette 

Safeguard The Server Room 
With The Right Do's & Don'ts 



by Bruce Gain 

All it takes is one spilled drink to short 
out a circuit on a server rack or a layer of 
contaminant buildup from workers' shoes 
to cause components to overheat. Both 
scenarios can bring about equipment shut- 
downs and even data loss. Given the mag- 
nitude of risk that human behavior poses 
to the data center, anyone who sets foot in 
the enterprise's IT center must follow and 
understand its rules and policies. 

Here are some tips relating to data center 
etiquette. Certain best practices covered 
here might seem to err on the over- 
cautious side, but they actually make a lot 
of sense when balanced against the poten- 
tial disasters they help to prevent. 

Nail Down The Access Policy 

The first line of defense is making sure 
that anybody who enters the data center 
signs in and wears a badge, while visitors 
must also have an escort, says Brad 



sponsor has preregistered you ahead of 
time as a visitor," Kowal says. "You often 
have value-added resellers and vendors 
taking care of equipment on the floor, but 
they have to prove who they are by show- 
ing some kind of credentials." 

Don't Allow Photography 

Someone taking a picture in the data 
center might seem harmless enough, but a 
seemingly innocent photo can cause a lot 
of damage to both the data center and the 
enterprise. Someone could enter the data 
center illicitly by getting a guest badge by 
using a false ID and then take pictures to 
get a "lay of the land" in order to later sab- 
otage the business, Kowal says. 

Although not all small to medium-sized 
enterprises have a no-picture-taking policy 
in place, the use of cameras is, at the very 
least, something to pay attention to, Kowal 
says. "If allowed, you need to know exact- 
ly why someone is taking pictures, and 
they better have a good enough answer," 
Kowal says. 



"Clearly, liquids represent Ban Food & Drinks 

the highest potential for 
risk of shorting critical 
computer components." 



-Cherry Systems' Haim Sternberg 

Kowal, assistant data center director for 
Shands HealthCare in Florida. 

In enterprises without a data center sign- 
in procedure, people can show up who 
look like they are workers, but it is not 
apparent who they are or what company 
they represent. The issue can be especially 
problematic if there is a security breach 
and there is no sign-in sheet that shows 
exactly who was in the data center during 
a specific time period. "The operator has 
to know who enters the data center at all 
times. If you are not an employee, then 
you are not getting on the floor unless a 



Eating daily three- 
course meals might not 
always be appropriate 
at your desk, but it is 
usually OK to at least 
eat a snack and sip a 
drink while you work. 
However, data center 
workers cannot have 
such a luxury when in- 
side the server room. 

"Clearly, liquids represent the highest 
potential for risk of shorting critical com- 
puter components. Also, the corrosive 
nature of most drinks could cause long- 
term nightmares for electronics that are 
very hard to diagnose due to the fact that 
the onset of the corrosion is gradual, so the 
problem would be intermittent and would 
drive the support team crazy," says Haim 
Sternberg, president and owner of Cherry 
Systems (www.cherrysystems.com). 
"Small and loose sohd food like chips or, 
worse, small candy like M&Ms have a 



BONUS TIPS 



■ Don't pack or unpack in 
the data center. All packing 
and unpacking of equipment 
should be done outside of the 
data center. "Corrugated 
cardboard boxes or wooden 
skids shed fibers when 
moved or handled," says 
Kevin Vickery, president of 
ProSource Mission Critical 
Services (www.team-pro 
source.com). "Evidence of 
this is indicated by the preva- 
lence of the materials in sam- 
ples obtained from sub-floor 
deposits. Stored items are not 
only contamination sources. 



but their handling in the com- 
puter room controlled areas 
can agitate settled contamina- 
tion already in the room." 

■ Ban cell phones. Cell 
phones should not be al- 
lowed in the data center for 
several reasons. Besides 
the problems associated 
with taking pictures using a 
phone's onboard camera, a 
smartphone can easily be 
connected to servers with 
a USB cable, thus posing 
security risks, and phones' 
electromagnetic interference 



can cause problems, as well, 
says Haim Sternberg, presi- 
dent of Cherry Systems 
(www.cherrysystems.com). 
"Many cell phones have 
internal storage, like a flash 
card. The risk is that with a 
USB cable, one can copy all 
kinds of data to the phone 
and take it out of the server 
room without detection," he 
says. "EMI is much less of 
a problem nowadays, but it 
is not completely safe and 
can potentially create some 
unexpected problem in the 
server rooms." 



Best Tip: 

Lead By Example 

Loose cables or unused boxes, equipment 
left lying on the floor, or smudge marks from 
dirty shoes reflect sloppy enforcement of 
procedures, besides creating potential data 
center hazards. It is thus crucial to enforce 
and constantly show by example that a 
cleanliness policy and etiquette are strictly 
enforced at your data center. 

"Maintaining a fairly high level of cleanli- 
ness will raise the level of occupant aware- 
ness with respect to special requirements 
and restrictions while in the data center," 
says Kevin Vickery, president of ProSource 
Mission Critical Services (www.team- 
prosource.com). "Occupants or visitors to 
the data center will hold the controlled 
environment in high regard and are more 
likely to act appropriately." 

Most Practical Tip: 

Take Care When 
Moving Equipment 

Replacing equipment and components is a 
common practice in data centers — but it is 
also a potential source of mishaps, as well. 
Equipment being carried in or out can get 
dropped and also damage other equip- 
ment. According to Haim Sternberg, presi- 
dent and owner of Cherry Systems (www 
.cherrysystems.com), the remedy is to 
mandate the use of wheeled trays when 
transporting equipment or components 
inside the data center. "A wheeled tray pro- 
vides for a safe and secure platform to 
bring in spare parts and swap the bad 
ones," Sternberg says. 



tendency to fall and roll into unlikely 
places and then sit there like a time bomb." 

Given the importance of banning food 
and drinks, it is a good idea to communi- 
cate the policy through more than one out- 
let. "I like to put a little table next to the 
door with a sign saying 'no food or drink 
in the data center,'" says John Matzek, 
CEO of Logic IT Consulting (www. logic 
itc.com). "If administrators must sign a 
form to gain access, include the policy on 
drinks and food." 

Reduce Shoe Contaminants 

Shoes serve as magnets for dust and 
filth that can eventually make their way 
into the data center. If precautions are 
not taken, particulates from footwear can 
represent a major contaminant risk, 
potentially leading to the breakdown of 
servers and other equipment. "It's all 
about dirt and dust," Kowal says. 
"Especially when you are dealing with a 
pressurized floor, all that stuff from 
shoes will get blown up into [the server 
racks and infrastructure]." 

Although adhering to the standards of a 
clean room environment as much as possi- 
ble is ideal, is it necessary to cover shoes 
with antistatic "booties" to be worn inside 
the data center? Not necessarily, although 
wearing feet coverings or booties in the data 
center is a common practice among Fortune 
500 companies. However, mandating that 
anyone who enters the server room first 
stand on a sticky, flypaper-like mat before 
entering the data center can go a long way 
to remove shoe contaminants, Kowal says. 
"It really pulls all of the junk from your 
feet," he says. 
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HOW TO 



Implement An IT 
Chargeback Program 

Consider The Benefits & Pitfalls Before Moving Forward 



by John Brandon 

In the modern data center, control- 
ling costs requires a keen financial under- 
standing. For some managers, this means 
planning server loads and network band- 
width costs, leveraging services such as 
storage and phone across the enterprise, 
expertly forecasting the needs of the busi- 
ness, and watching technology trends and 
purchasing only at optimal times. 



Key Points 



Before implementation, examine busi- 
ness needs and decide liow IT can 
continue to provide services in a 
chargeback model. 

You should also determine all of the vari- 
ables for chargebacks, including sen/er 
cooling and rack usage. 

When evaluating your needs, use 
accounting programs to track charge- 
backs for labor and expenses. 



Some companies have moved to an IT 
chargeback model to address the finan- 
cial concerns of running a data center, 
where IT charges each business unit for 
the services they use. In some cases, this 
endeavor is quite complex, especially 
when you consider server utilization in a 
virtualized environment. Fortunately, a 
few key steps can help you implement 
this model and resolve some charge- 
back chores. 

Implementation: Where To Start 

William Gutches, vice president of 
operations for Smithbridge Consulting, 
says a good first step is to evaluate the 
needs of the business. He advises SMEs 
to anticipate how the business units 
would benefit from a chargeback system 
and how the model would help the busi- 
ness be more effective. He also rec- 
ommends asking whether business units 
are just seeking more control over IT 
processes, whether divisions are trying to 
determine if projects are viable, and 
whether IT customers in each business 
unit will trust IT estimates on costs 
before moving forward with a charge- 
back model. 

The next most important question, says 
Gutches, is to determine how much it will 
cost to implement a chargeback program 
and whether the business units are willing 
to pay for this new process change. 

Then, after determining the scope and 
business needs, evaluating how your 
company will pay for the chargeback 
program itself, and thinking through how 
the chargeback program will work in 
your specific environment, Gutches says 
the next step is evaluating software that 
will help with a chargeback program and 
help you implement the process. This 



can be as simple as using a general 
accounting program that tracks labor 
and expenses by project according to 
each department. 

"[You can use] time tracking software 
to collect hours spent on each project as 
well as the purchase order capability to 
track requests for spending per project," 
says Gutches. "Salary and benefits infor- 
mation on employees [is] assigned to each 
project so that a cost as close to actual 
for each person is available for track- 
ing. Accounting procedures will help to 
determine which costs can be expensed 
and which should be capitalized. Planning 
procedures will allow the decision makers 
to determine which proposed projects 
(and their associated costs and benefits) 
will be approved to go forward." 

Once a process is in place, IT can 
move ahead with a chargeback program 
that tracks labor, equipment, and service 
costs and expertly manages the amortiza- 
tion by business unit. 

Chargeback Challenges 

C. Scyphers, a consultant with Dae- 
mon Consulting, says one of the key hur- 
dles to expect with IT chargeback has to 
do with virtualization. Suddenly, the air- 
tight process of dividing up server work- 
loads and projects becomes much more 
difficult to manage, as it is harder to 
determine who should pay for one physi- 
cal server. 

"Virtualization throws a very large 
wrench into [IT chargebacks] as the con- 
nection between a virtual server and its 
physical home is not necessarily as 
clear," says Scyphers. "Almost any 
hypervisor offers the ability to extract 
the necessary data to do accurate charge- 
back of virtual machines. However, most 
of the platforms do not make this process 
very easy. Typically, a third-party tool or 
business intelligence reporting structure 
will need to be implemented to resolve 
this particular thorny issue." 

Another challenge is more of a soft- 
skill management issue. In a chargeback 
program, it may be too easy for the busi- 
ness units to start seeing the data center 
as just another utility service — one that 
exists solely for each business unit. This 
means it may become difficult to analyze 
technology trends, forecast services for 
the company, or even train staff ade- 
quately because there is no business unit 
willing to pay for that work. 

And according to Gutches, creating a 
chargeback environment where none has 
been before — or after a failed attempt — 
will not be easy. "If there had been resis- 
tance or an incomplete understanding of 
what was needed, there could continue to 
be inaccuracies and resistance." 

Other Considerations 

Some analysts decry the need for 
chargebacks because they say it devalues 
IT by turning it into a simple cost center 



that just provides the exact services the 
business units need, as opposed to being 
a self-contained entity that also pushes 
the business forward into new techni- 
cal directions. 

Scott Archibald, an analyst with Ben- 
der Consulting, says with chargeback 
programs, business units often come to 
view IT as too much of a flat-rate ser- 
vice. Yet he says there are still ways to 
mitigate the perception that IT has now 
become a third-party contractor without 
its own business intelligence. 

For starters, Archibald advises against 
inflating prices to pay for strategic analy- 
sis, as business units will cry foul and 
these expenses will be the first to be 
cut when setting budgets. Instead, IT 
should be designated as a separate cost 
center that has a budget for these plan- 
ning endeavors. 

Another pitfall to avoid is the tendency 
to duplicate efforts. Archibald says he 
has seen companies move to a charge- 
back model, only to see similar roles 
replicated in each department. For exam- 
ple, the business units might want to hire 
someone to analyze IT services or do 
procurement when it is smarter to have 
one IT group performing this function 
for all business units. 

Archibald says another risk is that 
business units that come to view IT as a 
mere vendor inside the same company 
may decide to look elsewhere for ser- 
vices or even hire some of their own IT 
staff, which just duplicates efforts even 
more and can waste resources squired to 
serve the entire business. 

In the end, IT chargeback can work, 
but it is important to plan the process, 
track using accounting principles, and 
then watch for any fallout that can occur 
with the chargeback program. 



TOP TIPS 



William Gutches, vice president of opera- 
tions for Smithbridge Consulting, says to 
continue tracking the benefits of the 
chargeback model and be ready to move 
to a different model if chargebacks are 
not working for your organization. 

If a chargeback implementation fails, IT 
should be ready to evaluate why it failed 
and be ready with a contingency plan 
that does make it work effectively, 
Gutches adds. A project can succeed 
and the chargeback model can fail at 
the same time, which just makes it hard- 
er to analyze why the failure occurred. 

Scott Archibald, an analyst with Bender 
Consulting, says an ancillary idea to 
direct IT chargebacks is to consider align- 
ing parts of IT with the business that may 
not directly sponsor that activity but has 
more say in those service offerings. 



Federal Government 
Suggests Changes 
To Attract Young 
IT Workers 

A recent report by the federal government's 
CIO council suggests that changes in work- 
place trends are necessary to attract and 
retain the next generation of workers for fed- 
eral IT positions. The report, "Net Generation: 
Preparing for Change in the Federal Infor- 
mation Technology Workforce," examined 
evolving trends within the federal IT work- 
force and found that the federal government 
is struggling to hold on to young workers. 

"Net-Geners (those between 17 and 31 
years of age) are not patiently working their 
way through the organizational hierarchy 
but are instead sampling professional 
opportunities and moving on quickly when 
they see no clear-cut advantages — person- 
ally, professionally, or financially — to stay- 
ing," the report says. 

The federal government isn't the only orga- 
nization lacking young workers in IT. Over- 
all, there are fewer students graduating 
with IT degrees than what is required to 
meet the future demand, as explained by 
the report. The shift in trends comes at a 
time when 63% of current federal IT em- 
ployees are at least 45 years old and are 
nearing retirement age. 

Dave Wennergren, deputy CIO for the 
Department of Defense and the leader of 
the study, says that although this change 
is inevitable, engaging members of the 
Net Generation is possible. He explains 
the shift in workforce trends begins with 
having the right technology. 'The expecta- 
tion of the workforce coming to us now [is] 
they expect to have the kinds of tools they 
have in their private lives," Wennergren 
says. "Now people have all manner of mo- 
bile devices at home and in their private 
lives that give them great connectivity and 
great ability to use the tools that are avail- 
able today, so . . . you would expect your 
employer to provide you access to the kinds 
of tools you are used to using." 

A Call To Action 

The report presented strategies for engaging 
members of the Net Generation, including 
providing tangible feedback on performance, 
increasing public service opportunities, giv- 
ing young workers responsibility, allowing for 
schedule flexibility, increasing personal on- 
the-job coaching, and providing performance 
awards such as cash rewards or additional 
time off. 

Wennergren says this alteration in work- 
force trends should be viewed as a call to 
action in order to properly adapt to the 
changing environment. "If we don't take 
advantage of this call to action, then we 
will miss an opportunity to make sure that 
we have the right workforce to meet the 
demands of our future," he says. 

by Amanda Bouc 
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I Google "Mistakenly" Collects 
Personal Data 

After having earlier admitted and defended its 
practice of collecting such readily broadcast 
data as MAC addresses, Google more recent- 
ly disclosed that its Street View vehicles had 
also collected information about Web sites 
that users had visited. The information, which 
was collected from users running unprotected 
Wi-Fi networks, was never used in any Goo- 
gle products, according to the company. The 
mistake, company spokespersons say, origi- 
nated in a piece of experimental software, the 
functionality of which was not meant to be 
included in the program the cars began using 
in 2007 to collect wireless data. 




I Santa Clara Approves Plans 
For New Yahoo! Campus 

Yahoo! has received approval from city offi- 
cials in Santa Clara, Calif., for plans to build 
a massive 46-acre campus with more than 
3 million square feet of office space housing 
its new headquarters. Yahoo! purchased the 
property years ago for $112 million. Report- 
edly, Yahoo! will provide Santa Clara with 
more than $10 million in funds earmarked 
for improvements to the city, including trans- 
portation enhancements. Plans for the cam- 
pus include 13 six-story office buildings and 
three additional buildings in which cafete- 
rias, fitness centers, and other services will 
function for the 12,000 Yahoo! employees 
expected to work there. Yahoo! reportedly 
employed about 13,900 people as of Decem- 
ber 2009. Green-related construction ap- 
proaches will include locating a majority of 
parking spaces underground, building bike 
paths, and using solar panels to provide 
upward of 8% of the power the campus is 
expected to use. Groundbreaking ceremo- 
nies have yet to be announced. 

I Report Blames Single Gang 
For Most Phishing Attacks 

According to new data from the APWG 
(Anti-Phishing Working Group), a single 
gang of cybercriminals is responsible for as 
many as two-thirds of the phishing attacks 
that took place in the second half of 2009. 
The APWG, which is a coalition of global 
law enforcement, government, and indus- 
trial entities formed to combat phishing- 
related cybercrime, says that the Eastern 
European gang known as Avalanche was 
responsible for more than 84,000 of the 
nearly 127,000 phishing attacks carried 
out in the second half of 2009, although 
its activity has dropped substantially — 
Avalanche's attacks were down to nearly 
zero in April of this year, the APWG says. 
Still, the coalition says Avalanche is largely 

responsible 
for doubling 
the number of 
phishing attacks 
^U^^^ / over the first half 
^^^^^ of 2009. 




Change Review Boards: 
The Ears For Your Enterprise 

Track Changes To Identify Risks & Reduce Downtime 



by Chris A. MacKinnon 

Making a change to an enterprise net- 
work is easy, but it's deciding whetiier to 
make that ciiange tiiat's the hard part — 
so hard, in fact, that some enterprises 
implement change review boards to bet- 
ter track any changes made to networks 
or other enterprise systems. The ultimate 
goal is to reduce downtime caused by 
human error. Review boards evaluate 
any change someone wants to make and 
look for potential problems with the 
change and how those changes will 
impact other systems. 

Voice Of Reason 

Barclay Rae, head of Axios Global 
Services (www.axiossystems.com), says 
the review board concept is a simple, yet 
solid concept. He explains, "The idea is to 
take control and manage business risks 
and priorities of proposed changes. A 
group of empowered and relevant people 
meet on a regular basis to review any 
planned changes, identify risks, and 
approve or reject the changes. [They] also 
review the outcome of changes and any 
issues." Rae says this provides a regular 
forum through which all changes must 
be passed, thereby ensuring that the 
changes are not simply implemented "on a 
whim" by technicians. 

Rae says the concept works if the right 
people are involved (that is, a mix 
of management, technical, and some 
business). He says the initiative must 
maintain momentum and should be an 
ongoing and vibrant forum, not a "rub- 
ber-stamping exercise." Rae says the 
concept also works if all attempts to 
circumvent it are dealt with consistently 
and with levity; he says getting peo- 
ple on board doesn't happen if it 
becomes unnecessarily inflexible or 
unreasonable. He notes, "There should 
be enough business sense in the group 
and its members to build in practical 
flexibility when needed. So, it's a bal- 
ancing act between strict rules and com- 
mon sense." 

Voice Of Improvement 

Kevin Parker, chief evangelist of 
application lifecycle management at 
Serena Software (www.serena.com), 
says enterprises often find review board 
meetings a "necessary evil," and they are 
constantly looking for improvements to 
the process. He says, "Some of the 
issues they commonly experience in- 
clude very long lists of changes (but only 
a handful that affect each stakeholder), 
and some meetings can go for long peri- 
ods of time, where 90% or more of the 
content is not relevant to individual 
stakeholders. Some review boards actu- 
ally do not have the ability to understand 
the impact of a proposed change, nor do 
they generate audit trails of who ap- 
proved the changes." 

Parker says by bringing all the stake- 
holders in the business and IT together 
on a regular basis, a forum is created 
where proposed changes to the services 



Key Points 



• Change review boards meet regularly to 
review planned changes, identify risks, 
and approve or reject any changes. 
They ensure that change just doesn't 
happen without good reason. 

• Accountability is a driving force behind 
change review boards. If a production 
failure occurs, for example, the root 
cause of the failure can be determined. 
This process proves that there is room 
for improvement. 

• Change review board meetings must be 
well-organized and should become a 
regular feature in the enterprise, not 

an afterthought. 



running in production can be reviewed, 
the impact can be discussed, and a plan 
for the transition (and backout/recovery 
in the case of failure) can be created and 
shared so that everyone has the opportu- 
nity to give "go/no-go" approvals. He 
elaborates, "Meetings should be held 
weekly, biweekly, and monthly, with 
meetings held in person and by phone. 
These meetings can last for two or more 
hours sometimes." 

Who should be present? Parker says 
department heads, change management 
team members, data center operators, net- 
working staff, database administrators, 
security staff, and business continuity and 
software development representatives. 

Parker adds, "A few days before the 
meeting, a spreadsheet should be distrib- 
uted listing the proposed changes that are 
due in the upcoming change cycles. It is 
each stakeholder's responsibility to ana- 
lyze the list and determine if there are 
issues with any of the proposed changes. 
At the meeting, the list should be [gone 
through] and commentary should be 
invited." Parker says where there is need 
for debate, it should happen, and issues 
must be resolved if they can be or 
deferred if needed. 

Voice Of Accountability 

But the big question is: Are review 
boards really necessary? In Parker's 
opinion, the board is necessary, but the 
meeting is not. He notes, "It is essential 
to have accountability when changes are 
being made to production systems. This 
is very important in the event of a pro- 
duction failure in order to provide a 
mechanism to trace back to the root 



cause of the failure. This is not about 
assigning blame, but it is to enable 
process improvements and improvements 
to best practices so that future errors can 
be avoided." 

According to Parker, the most efficient 
and successful boards provide real-time 
online information that is accessible by 
everyone involved in requesting, approv- 
ing, and deploying changes. "The best- 
run systems notify stakeholders of the 
proposed changes that affect them and 
require them, by a specific date and time, 
to approve or disapprove the proposed 
change," he says. "This level of automa- 
tion can eliminate the change control 
meeting completely and instead turn the 
meeting into an exception meeting where 
problems are solved regarding particular 
changes." He says only affected stake- 
holders need to attend meetings. 

Rae, on the other hand, believes 
review boards are necessary in terms of 
what they do but not necessarily in terms 
of their format and structure. But if 
you're starting a review board, that's 
another story, says Rae. "You have to 
find the right people to run the board. 
Ideally, this should be someone with 
authority and respect, plus business 
focus and IT understanding (to gain 
respect from techies but also to be able 
to overrule them when required). It 
needs to be well-organized and should 
quickly become a regular feature that 
everyone expects to happen, not some- 
thing that reluctantly gets arranged late 
or missed." 

Small and midsized enterprises need 
to use the principles of change review 
boards as much as any other organization, 
says Rae; however, they may not need to 
run these with unnecessary formality, 
compared to larger organizations. 

For organizations that are serious 
about managing change, Parker says, "A 
change review board must be created. 
Companies should immediately move to 
automation of the approval process, 
[and] significant benefits over the tradi- 
tional meeting-based approach will be 
immediately achieved." Some of these 
benefits, Parker says, include visibility 
into all upcoming changes; accountabili- 
ty for approvers; the ability to create 
release calendars and therefore manage 
the throughput of changes; minimal need 
for attendance at meetings; and auditabil- 
ity and traceability so that root cause 
analysis can be done to improve process- 
es, practices, and policies. Q 



Automating Change 

When it comes to change review board accountability, electronic signatures provide an inter- 
esting psychological benefit. According to Kevin Parker, chief evangelist of application life- 
cycle management at Serena Software (www.serena.com), once people know their approvals 
and disapprovals are able to be tracked, it makes them much more circumspect about the 
changes they approve. Parker elaborates, "Automating the change process moves change 
review boards from being defensive because of their lack of clarity and visibility (and there- 
fore a drag on the velocity of essential changes) to being an empowering and enabling part of 
the life cycle that improves not only the quality of the changes, but actually improves the total 
throughput of changes." 
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by Kurt Marko 

Cloud computing has dominated the 
headUnes of product announcements, ana- 
lyst reports, and industry conferences. 
The next wave in the cloud Zeitgeist is 
now upon us with a spate of new books 
hitting the market. Given the rapid pace 
of change, these will undoubtedly be 
hopelessly obsolete in a couple years, but 
they do provide a vehicle for knitting the 
elements of cloud computing into a coher- 
ent motif. 

In "Management Strategies for the 
Cloud Revolution," Charles Babcock 
attempts to summarize the buzz for busi- 
ness managers and executives who aren't 
steeped in the IT world's news cycle. 



Meant as a primer, the book provides a 
sweeping overview of the various cloud 
service models, their business benefits, 
and the cloud's ramifications on business 
strategies and IT architectures. Babcock 
admits that at this nascent stage of devel- 
opment, it's difficult to explain or even 
predict the cloud's significance, noting, 
"There is a large-scale experiment under- 
way on many fronts to determine what 
might be done 'in the cloud.'" 

Many Service Models 

The book opens by defining terms and 
immediately confronts the many service 
models bandied about by vendors — what 
one expert has christened XaaS, or 
"everything as a service." In rationalizing 



the difficulty technologists have in com- 
municating the concept to executives, 
Babcock notes, "The corporate IT staff 
knows the cloud when it sees it; it just 
can't tell you what it is." 

Babcock then dives into the virtualization 
technology fundamental to cloud infra- 
structure, illustrating how encapsulating a 
slice of hardware, an OS, and application 
stack into a virtual appliance provides great 
flexibility in managing multiple diverse 
workloads on a vast server farm. Here the 
book takes something of a detour from the 
standard concept of cloud computing as a 
shared, multitenant information utility to 
describe so-called private clouds and the 
integration of public and private infrastruc- 
ture into a hybrid architecture. This focus 
on extending cloud concepts inside the 
enterprise likely stems from Babcock' s 
view, shared by many in corporate IT, that 
"organizations that are openly contem- 
plating using the public cloud will find 
that there is a need to keep many ap- 
plications and much data in-house." Al- 
though this may be the prevailing wisdom 
in conservative large corporations, it's 
hardly universal. 

Common Objections 

The book also examines common 
objections to cloud computing, such as 
security concerns and a lack of standard- 
ization that can lead to vendor lock-in, 
and covers the cloud's implications for IT 
organizations. As infrastructure opera- 
tions are transformed to service delivery, 
there's an obvious winnowing of sys- 
tems administrators and accompanying 
ascendancy of business analysts, but 
Babcock also sees the cloud, like the 



PC before it, as leveling the playing field 
between users and IT, or "a democratiz- 
ing force, extending more computer 
resources to those whose access was for- 
merly rationed." 

Babcock concludes by speculating about 
the cloud's effect on business strategy. 
Overall, "Management Strategies for the 
Cloud Revolution" is a competent synopsis, 
although it's more a descriptive overview 
than a proscriptive strategy guide. 

Key Concepts 

• Cloud computing Is a hot, often over- 
hyped concept that leaves many busi- 
ness executives baffled. "Management 
Strategies for the Cloud Revolution" 
provides an overview of the various 
cloud service models, an explanation 
of some enabling technologies, an out- 
line of objections and concerns, and 
implications for business strategies and 
organizational structures. 

• Written in a style that's easily accessi- 
ble and jargon-free, the book outlines 
how organizations can apply cloud-like 
technology, such as virtualization and 
self-provisioning, to improve the effi- 
ciency of internal infrastructure and 
examines ways internal, private clouds 
can be linked with shared, public ser- 
vices in a hybrid architecture. 

• The book is interspersed with case studies 
and examples of successful uses of the 
cloud in a multitude of corporate and gov- 
ernmental settings. 
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Solutions Directory 

Here are brief snapshots of several companies 
offering products designed for the data center and 
IT industry. Listings are sorted by category, 
making it easy for you to find and compare companies 
offering the products and services you need. 

You can find more detailed information on these 
companies and the products they offer inside this issue. 



To list your company and products, 
call (800) 247-4880. 



Physical Infrastructure 



CYBER@SWITCHING 



® 



Cyber Switching began pioneering power distribution 
technologies in 1994. Our PDUs are used to power cycle 
and manage power to blade servers, routers, SANs, and 
other data center equipment. Our intelligent PDUs can 
monitor current individually by outlet and also provide virtual 
circuit breaker protection on an individual outlet basis. No 
other PDU on the market offers these unique features. 



Products Sold: 

• Intelligent power management 

• Value-added power management 

• Metered power distribution 

• Three-phase power distribution 



Energy management 
and control 
Switches 
Patch Panels 



311-6277 I www.cyberswitching.com 



Physical Infrastructure 



PDUs 



direct 



Established in 2008, PDUsDirect.com is an online whole- 
saler providing a select line of PDUs for sen/er and net- 
worked environments. PDUs Direct's basic, metered, and 
switched Rack PDUs provide local and remote power 
management, power monitoring, and environmental moni- 
toring. We pride ourselves in offering industrial-grade qual- 
ity products at the lowest prices, with the fastest shipping 
(most orders shipped within 24 hours) and simplest pur- 
chase process. 

Products Sold: 

A complete line of 20A PDUs, including metered, basic, 
and switched. 



751-7387 I pdusdirect.com 



Physical Infrastructure 



ADDER 



Adder, the experts in connectivity solutions, has special- 
ized in global and local computer connectivity since 1984. 
As a leading developer and manufacturer of KVM switch- 
es, video and audio extenders, KVM-over-IP devices, and 
remote management solutions. Adder gives IT profession- 
als the tools they need to manage networks and enable 
distributed remote control anywhere in the world. 

Products Sold: 

• KVM and KVM-over-IP switches and extenders 

• Management software 

• Cables and accessories 

• Rackmount kits 



Physical Infrastructure 



S^AVTECH 



AVTECH Software, founded in 1988, is focused on making 
the monitoring and management of systems, servers, net- 
works, and data center environments easier. AVTECH pro- 
vides powerful, easy-to-use software and hardware that 
saves organizations time and money while improving opera- 
tional efficiency and preparedness. AVTECH products use 
advanced alerting technologies to communicate critical status 
information and can perform automatic corrective actions. 

Products Sold: 

A full range of products that monitor the IT and facilities 
environment, including temperature, humidity, power, 
flood, room entry, and UPS 



220-6700 I www.AVTECH.com 



Physical Infrastructure 




TECHNICAL WORKSPACE 



Based in New York City, Hergo Ergonomic Support 
Systems is an independent designer and manufacturer of 
enclosure cabinet solutions, technical computer furniture, 
and modular racking systems. The company's products 
are designed to promote organization in the workspace 
and to increase the productivity of computers, peripherals, 
and communications equipment. Hergo is known for its 
high-quality products and superior customer service. 



Products Sold: 

• Racks 

• Enclosures/cabinets 

• Motorized workstations 

• Flat-panel arms 



Computer desks 
Cable management 
Power management 



222-7270 I www.hergo.com 



Physical Infrastructure 



RACKMOUNT 

SaLUTiaNS,Ltd 

risr service matters. 




Rackmount Solutions' mission is to listen to the IT engi- 
neer's specific needs and deliver superb-quality, high-per- 
formance products through continuous product innovation 
and operational excellence. We pride ourselves in provid- 
ing quality customer sen/ice, products that fit your IT 
requirements, and solid value for your money. 

Products Sold: 

• Wallmount and sen/er racks and cabinets, including 
sound proof, air conditioned, and large cable bundle 

• Desktop/tabletop portable racks 

• Shockmount shipping cases 

• Bulk cable 



(866)207-6631 I www.rackmountsolutlons.net 



Networking & VPN 



GoToAssist 

EXPRESS 



GoToAssist® Express"^"" lets you easily view and control 
your customer's computer online, so you quickly resolve 
their technical issues. You'll amaze customers by solving 
problems on the spot while reducing travel time and 
lowering supports costs. GoToAssist Express is brought to 
you by Citrix Online, a fast-growing division of Citrix 
Systems. Every month, more than 15,000 new customers 
start using Citrix Online's sen/ices to work from anywhere 
with anyone — using remote-connectivity tools to save time, 
get more done, and connect to others around the world. 

Products Sold: 

GoToMyPC, GoToMeeting, GoToAssist, and GoToWebinar. 



Physical Infrastructure 




BayTech was founded in 1976 and, since the 1990s, has 
developed unique products for remote power management. 
The company uses printed circuit board instead of wires for a 
better, more resilient connection between the data center 
equipment and the receptacle. BayTech provides an exten- 
sive Web site with brochure downloads, warranty informa- 
tion, and reseller support and also offers evaluation units for 
data centers. 

Products Sold: 

• Power control, distribution, management, and metering 

• Power transfer switches 

• Console management and remote site management 



(800) 523-2702 I www.haytech.net 



Physical Infrastructure 



MOVINCOOL. 

the #1 SPOT COOLING SOLUTION 



The MovinCool division of DENSO Sales California has 
pioneered the use of portable air conditioning solutions for 
a variety of North and South American markets since 1982. 
MovinCool works with a national network of distributors and 
suppliers to provide product sales, installation, and rental. 

Products Sold: 

• Office Pro Portable Air Conditioner Series for indoor 
environments such as sen/er and telecom rooms 

• Classic & Classic Plus Portable Air Conditioner Series 
for moisture removal, outdoor and industrial spot-cooling 

• CM Series ceiling-mounted A/C for cooling server 
rooms, telecom closets, or anywhere space is limited 



(800)264-9573 I www.movincool.com 




Physical Infrastructure 



Server Technolosy 

Solutions for ttie Data Center Equipment Cabinet 



Server Technology is committed to the PDU market with the 
largest group of engineers dedicated to power distribution 
and other solutions within the equipment cabinet. Advance- 
ments in device power monitoring help data centers monitor 
and improve their efficiency and continuous research and 
development is fueled by companies that look to Server 
Technology for their custom cabinet power solutions. 

Products Sold: 

A complete line of cabinet PDUs, including Per Outlet 
Power Sensing (POPS), Rack Mount Fail-Safe Transfer 
Switch, Console Port access with remote power manage- 
ment, Switched, Smart, Metered, Basic, and -48 VDC 



(800)835-1515 I www.servertech.com 



Networking & VPN 



t 

\i) up.times 



Founded in 2000 and headquartered in Toronto, Canada, 
up.time software specializes in efficient and cost-effective 
systems management software for the small to midsized 
enterprise markets, up.time's solutions include monitoring 
for servers, VMware, and applications, up.time's goal is 
to help organizations eliminate unnecessary IT outages, 
increase service availability, and reduce the cost of 
systems management. 

Products Sold: 

Server and virtual monitoring and management, applica- 
tion monitoring, capacity planning, server consolidation, 
multi-data center management 



(888) 932-3337 I www.adder.com 



(800) 549-8541 I www.gotoassist.com/processor 



(866)735-4304 | www.uptlmesoftware.com 
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Storage 




Olivers 



Established in 1983, CIVIS Products is a leading innovator 
in data backup, encryption, and security technology. CMS 
Products has received global recognition for its work in 
developing leading-edge, easy-to-use products that 
revolutionize the notebook and desktop data backup/ 
restore and storage industry. 

Products Sold: 

• Backup and restore disaster recovery software and sys- 
tems, including laptop, desktop, and secure versions 

• Laptop hard drive upgrades 

• Data security products, including encryption software, 
encrypted portable backup, and encrypted flash drives 



(800)327-5773 | www.cmsproducts.com 




Clients 



CLERITY 

SOLUTIONS, INC 



Chicago-based Clerity serves midsized and large enter- 
prises and financial service vendors around the globe with 
its multiplatform mainframe migration, modernization, and 
IT optimization products. Its services support Solaris, 
Linux (including System z), HP-UX, IBM AIX, Windows, 
and other platforms, and its partners in-clude Oracle, 
IVIicrosoft, Red Hat, and HP. The company has regional 
offices in Latin America and Europe as well as in North 
America. 

Products Sold: 

UniKlx Mainframe rehosting software that modernizes, sim- 
plifies, and reduces annual operational costs up to 70% 



(630) 981-6100 I www.clerlty.com 



Equipment Dealer 



IrfiVJhiiJtler 



• PaceButler buys used cell phones. 

• In business since 1987 

• Redeploy your used phones after upgrade 

• Donation option - directly to the non-profit of your choice 

• Dedicated to customer satisfaction 

- A+ Rating with the Better Business Bureau 

- Payment issued in four days 

• Dedicated to employee development 

- Book reading program 

- Health and fitness programs 

Products Sold: 

We buy used cell phones & PDAs, including Apple, LG, 
Blackberry, HTC, Motorola, Nextel, Nokia, PalmOne & 
Samsung. 



(800)248-5360 I www.pacebutler.com 



Storage 



•1 
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Disfceeper 

rnrnnrarinn ■ 



Diskeeper is the undisputed innovator of technologies that 
enhance the performance and reliability of Windows com- 
puters. ClOs and IT managers rely on Diskeeper software 
to provide unparalleled performance and reliability to their 
business laptops, desktops, and sen/ers. Founded in July 
1981, Diskeeper is a multinational corporation with head- 
quarters in Burbank, Calif., and corporate offices in 
England and Hong Kong. The Diskeeper product line is 
distributed globally. 

Products Sold: 

A line of computer and storage performance-enhancing, 
data protection, and data recovery products. 



(818) 771-1600 I www.dlskeeper.com 



Clients 



dtSearch^ 

www.dtsearch.com 



Maryland-based dtSearch started research and develop- 
ment in text retrieval in 1988. The company is known for 
speedy adoption of new programming standards, OSes, 
and file types. Plus, it has a flexible licensing model. 
Typical corporate use of dtSearch includes general infor- 
mation retrieval, Internet and intranet site searching, and 
email archiving and email filtering. 

Products Sold: 

Text retrieval products, including: 

• Desktop With Spider • Web With Spider 

• Network With Spider • Engine For Win & .NET 

• Publish For CD/DVDs • Engine For Linux 



(800)483-4637 I www.dtsearch.com 



Equipment Dealer 




In 1987, Pegasus Computer Marketing started providing 
mainframe products to the end-user market. What began as 
a sales-only organization soon adapted to offer in-house 
repair and refurbishment. During the past 10 years, Pegasus 
has focused primarily on the point-of-sale and barcode 
industries, buying, selling, and providing sen/ice contracts for 
anywhere from a few scanners to hundreds. 

Products Sold: 

We buy, sell, and service: 

• Point-Of-Sale Equipment and POS/PC Flat Panels 

• Wired and Wireless Barcode Hardware 

• Kronos Time Clocks and Accessories 



(800) 856-2111 I www.pegasuscomputer.net 



Servers 



f) Portwell 




Intel Embedded Alliance member American Portwell 
Technology is a wholly owned subsidiary of industrial com- 
puter innovator Portwell of Taiwan. It's known for its cus- 
tom solutions as well as for its rackmount and embedded 
computers used in industrial, medical, retail, financial, 
semiconductor equipment, mission-critical, and network 
security environments. 

Products Sold: 

Embedded, single-board, and rackmount computers; spe- 
cialty platforms; human-machine interfaces; and communi- 
cation appliances 



(510) 403-3399 | www.portwell.com 



Equipment Dealer 
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^■^r^k Information 
Technology 
illr Trading 



At Information Technology Trading, our goal is to help you 
acquire the right hardware or software solution. We special- 
ize in purchasing and reselling data-processing equipment 
and have more than 21 years combined experience. We pro- 
vide sen/ices and system upgrades, DASD, communication, 
and memory. We're also an outlet for off-lease portfolios. 

Products Sold: 

• AS400, Advanced System/36, R/S6000, ES/9000, and 
PC systems (including lease and rental) 

• CPUs, memory, disks, tapes, displays, and controllers 

• Services, including system design and installation, 
maintenance, and buyback of existing hardware 



(877)715-3686 I www.itechtradlng.com 



Services 



SHICLDS 

ENVIRONMENTAL 

Shields Environmental delivers telecom assets to leading 
carriers across the globe and offers an end-to-end approach 
that helps to provide maximum value for end-of-life equip- 
ment. Shields links good environmental management 
practices with revenue return, and in 1995, it was the first 
joint company to achieve a certified Environmental Man- 
agement System, which is now ISO 14001. 

Products Sold: 

• Sell or exchange fully warranted network products 

• Repair, refurbish, and test equipment 

• Energy conservation services and products 

• Help with project and risk management 

• Responsible material recycling and asset recovery 



(877)321-4447 I www.shields-e.us 



Attention Data Center Professionals 



PRODUCT RELEASES 



Where do you go to find the 
newest products available? 

Check out each issue for . . . 



PROCESSOR. 



Articles with > 
valuable product 
overviews and data. 




< Quick rundowns of new 
data center-related products, 
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Clear, FtotusiVolP 



New Product articles > ^^f;; 
filled with in-depth |§ 
information, 

j gECI 




then go to Processor.com and take advantage of our online search tools to find even more in-depth information! 
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TEAM'S — 
SILVER BULLET 





ry It FREE for 30 Days 

www.gotoassist.com/processor 



QUICK ON 

THE DRAW 

AND 
QUICK TO 

SOLVE! 



A legendary support team is 
already in your office — they just 
need the right tool. GoToAssist 
connects your team with your 
customers like never before with 
simple, powerful remote support. 



GoToAssist 
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